| Commit message (Collapse) | Author | ||
|---|---|---|---|
| 26 hours | server3/stalwart: Disable | Benedikt Peetz | |
| There is no, and really no, reason why this service is running. | |||
| 26 hours | server2/nextcloud: Upgrade from nextcloud32 to nextcloud33 | Benedikt Peetz | |
| 2026-03-22 | modules/system-info: Add missing port | Benedikt Peetz | |
| 2026-03-22 | {modules,tests}/rocie: Init | Benedikt Peetz | |
| 2026-02-15 | modules/cgit: Stop exposing all repositories as http clones | Benedikt Peetz | |
| This feature has recently been added to nixpkgs to fix the security vulnerability. | |||
| 2025-12-18 | modules/matrix: Remove failing postgresql post-start code | Benedikt Peetz | |
| This code stops postgrsql from starting. | |||
| 2025-12-18 | modules/anubis: Make sure ngnix is actually enabled | Benedikt Peetz | |
| 2025-12-18 | modules/mail: Apply migrations and set initial stateVersion | Benedikt Peetz | |
| The server is already migrated, as such we should also try to apply this update in the very near future. | |||
| 2025-12-18 | modules/sharkey: Use the up-streamed nixpkgs module | Benedikt Peetz | |
| This works now, as we updated to 25.11. | |||
| 2025-12-18 | modules/rust-motd: Avoid using the deprecated `runCommandNoCCLocal` | Benedikt Peetz | |
| 2025-12-18 | modules/stalwart-mail: Use the nixpkgs' starwart package | Benedikt Peetz | |
| Ours is hopelessly broken and right now also pointless. | |||
| 2025-12-18 | modules/nextcloud: Update to nextcloud 32 | Benedikt Peetz | |
| 2025-12-18 | modules/anubis: Introduce and setup | Benedikt Peetz | |
| This should hopefully reduce the workload applied to our servers. Notably, `cgit` is not yet behind it, as it requires more, considering that it is a fgi application. | |||
| 2025-08-04 | modules/sharky: Add stup option for `services.melisearch.settings` | Benedikt Peetz | |
| We use the unstable module that sets this options (behind a `lib.mkIf false`). They are not needed, but the module system needs them to exist. | |||
| 2025-08-04 | Revert "{modules,test}/jitsi-meet: Init" | Benedikt Peetz | |
| This reverts commit 8040a61b373621e3e8a3684aecbb5cbf66d895c7. Jitsi did not work, and I think that it will need a better approach than this (i.e., updates to the NixOS module). | |||
| 2025-08-03 | modules/grocy: Initgrocy-new | Benedikt Peetz | |
| 2025-07-29 | {modules,test}/jitsi-meet: Init | Benedikt Peetz | |
| 2025-07-13 | modules/sharkey: Drop pointless dependency on `network-online.target` | Benedikt Peetz | |
| Sharkey can start without network and therefore does not need this dependency. | |||
| 2025-07-13 | {modules,pkgs}/sharkey: Use the sharkey package and module from nixpkgs | Benedikt Peetz | |
| Sharkey was package in nixpkgs. | |||
| 2025-07-06 | modules/users: Apply new formatting | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Add new `cg_stats` and `load_avg` sections | Benedikt Peetz | |
| 2025-06-23 | modules/rust-motd: Use correct name for `fail_2_ban` section | Benedikt Peetz | |
| This was change in one of the last releases. | |||
| 2025-06-23 | modules/rust-motd: Remove pointless ssl certificate section | Benedikt Peetz | |
| The certificates are auto-renewed. As such, we don't need to know, when they expire. | |||
| 2025-06-23 | modules/rust-motd: Generate the banner ahead of time | Benedikt Peetz | |
| 2025-06-23 | modules/users: change sils sshkey | Silas Schöffel | |
| My nitrokey ceased its cooperation with my setup :( | |||
| 2025-06-07 | modules/redlib: Remove old `libreddit` alias | Benedikt Peetz | |
| 2025-06-07 | modules/git-back: Init with the out-of-tree back | Benedikt Peetz | |
| 2025-06-06 | pkgs/stalwart-mail: Update to nixos 25.05 | Benedikt Peetz | |
| Now the stalwart-mail package is by default free. As such, we could drop the respective patches. | |||
| 2025-05-05 | modules/atuin-sync: Init | Benedikt Peetz | |
| 2025-05-04 | modules/matrix: Provide postgresql with a correct sql statement | Benedikt Peetz | |
| 2025-05-04 | modules/nextcloud: add calendar, contacts, tasks apps | Silas Schöffel | |
| 2025-04-28 | pkgs/taskchampion-sync: Put the sync server behind a ngnix proxy | Benedikt Peetz | |
| I realized, that the new taskchampion-sync-server uses a http api (instead of the custom protocol of taskserver). As such, we obviously want to put it behind a ngnix reverse proxy. | |||
| 2025-04-25 | modules/sharkey: Add required `@chown` syscall group to allow list | Benedikt Peetz | |
| The `~@priviledged` needed to go, as `@chown` is part of this group. | |||
| 2025-04-24 | modules/sharkey: Ensure, that it can access the host's CPUs | Benedikt Peetz | |
| This is, for some reason, needed for image uploads to sharkey. | |||
| 2025-04-24 | modules/system-info: Provide a nice warning message, if a port is not yet ↵ | Benedikt Peetz | |
| registered | |||
| 2025-04-24 | modules/matrix: Use the typed NixOS for user and db creation | Benedikt Peetz | |
| Note, that I have no way to test if this is actually going to work (no tests for matrix). But, I assume that it is not going to pose problems, as we are not migrating the db and these options won't remove state. | |||
| 2025-04-24 | modules/matrix: Group `vhack` attr keys together | Benedikt Peetz | |
| 2025-04-24 | modules/mastodon: Group `vhack` keys together | Benedikt Peetz | |
| 2025-04-23 | modules/taskchampion: Make its data directory owned by taskchampion user | Benedikt Peetz | |
| 2025-04-23 | modules/stalwart-mail: Add recommended proxy settings for stalwarts-proxy | Benedikt Peetz | |
| This includes setting things, like setting the `X-Forwarded-For` header. | |||
| 2025-04-23 | modules/constants: Also add a user to each group, so that duplicated gids ↵ | Benedikt Peetz | |
| are avoided | |||
| 2025-04-23 | modules/stalwart-mail: Don't restart the systemd service | Benedikt Peetz | |
| Restarting might be useful, if stalwart is actually _running_ in prod, but currently the constant restart makes it very difficult to debug (or even stop) the service. | |||
| 2025-04-23 | modules/stalwart-mail: Enable the http self-service interface | Benedikt Peetz | |
| 2025-04-23 | modules/nginx: Set the "acme" group as group of the "acme" user | Benedikt Peetz | |
| For some reason, this is not done already. Setting this prevents an assertion being thrown, that the "acme" user does not have a group. | |||
| 2025-04-23 | modules/stalwart-mail: Allow both nginx and stalwart-mail access to the cert | Benedikt Peetz | |
| This is needed for the http challenge (and for the potential to use nginx as a proxy in the future.) | |||
| 2025-04-23 | modules/stalwart-mail: Explicitly list out valid password hashes | Benedikt Peetz | |
| If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided. | |||
| 2025-04-23 | modules/stalwart-mail: Make `cfg.principals` nullable | Benedikt Peetz | |
| This makes it possible to use the internal storage | |||
| 2025-04-23 | modules/stalwart-mail: Use correct group name for `redis-stalwart-mail` | Benedikt Peetz | |
| 2025-04-22 | modules/sharkey: Init | Benedikt Peetz | |
| 2025-04-11 | modules/system-info: Register taskchampion port | Benedikt Peetz | |
 |
index : nixos-server | |
| nixos-config for vhack.eu servers https://vhack.eu | vhack.eu |
| aboutsummaryrefslogtreecommitdiffstats |