about summary refs log tree commit diff stats
path: root/pkgs/by-name/ba/back/src/web/prefix.rs (unfollow)
Commit message (Collapse)Author
3 days{hosts/server2,modules/mail}: Re-active the old mail serverBenedikt Peetz
Running two mail-servers on one system is a total /mess/. Both try to bind to the same ports, the old stack consists of **5** different systemd services whilst stalwart-mail's systemd service simply refuses to stop, etc. I'm confident that it can work, but it would probably be best to deploy the new mail-server on server3.
3 daysmodules/mail: Avoid changing the `virtualMail` user uidBenedikt Peetz
We would need to set the `vmailUID` option to this value and even then some parts of SNM would still hardcode the default of 5000. Considering that we are in the process of phasing out SNM, this does not seem to be a worthwhile endeavour.
3 daysmodules/mail: Actually set the uid/gid of the virtualMail userBenedikt Peetz
3 dayszones/vhack.eu: Use correct `eu` tld instead of `org`Benedikt Peetz
4 daysmodules/stalwart-mail: Assign uids and gids to the stalwart usersBenedikt Peetz
4 daysmodules/constants: Enforce the 0 to 400 limitBenedikt Peetz
4 daysmodules/constants: Correctly assign each uid so that none is greater 400Benedikt Peetz
The uid ranges from 400 upwards are reserved for things that allocate them dynamic during runtime (like systemd). Our users would than get clobbered, thus we avoid that range. BREAKING CHANGE: Well, we'll need to change all uid of the files owned by the respective users.
4 daysmodules/constants: Dry gid definitions by inheriting the uidsBenedikt Peetz
4 dayshosts/server2: Use the correct path to the DKIM keysBenedikt Peetz
4 dayshosts/server2: Setup stalwalt-mail on mail.vhack.eu for soispha@vhack.euBenedikt Peetz
We need to actually test stalwart out in the real world, because the test can never actually capture all the weird things people do with their mail setup. Refs: #6ea08aa
6 daystests/email-dns/secrets: Re-key secrets, so that soispha and sils can read themBenedikt Peetz
Doing a full `ragenix --rekey --idenitity <soispha.age.key>` run will fail, if there are secrets that she cannot decrypt. Thus encrypt the test secrets with all keys.
6 daysflake.lock: UpdateBenedikt Peetz
12 dayszones/vhack.eu: Fix cyclic CNAME entry for `source.vhack.eu`Benedikt Peetz
12 dayszones/vhack.eu: Add the `source.vhack.eu` dns entry for the redirectBenedikt Peetz
12 dayszones/vhack.eu: Update to actually be a drop-in replacement for netcup's serversBenedikt Peetz
Currently, our NS record was missing, and we had an MX record that pointed to `mail.foss-syndicate.org.vhack.eu`.
2025-03-11zones: Provide a single entry point for all zonesBenedikt Peetz
2025-03-10zones/vhack.eu: Set correct CNAME recordsBenedikt Peetz
2025-03-10modules/system-info: Include port 53 (dns) in port -> name mappingsBenedikt Peetz
2025-03-10{hosts,zones}: Init dns zone for vhack.euBenedikt Peetz
2025-03-09{modules/system-info,scripts/system_info}: InitBenedikt Peetz
This collects relevant information for each host in an informative markdown file. An example (generated via `./scripts/system_info.sh`): # server2 ## Virtual Hosts etebase.vhack.eu: dav.vhack.eu gallery.s-schoeffel.de git.foss-syndicate.org invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li issues.foss-syndicate.org libreddit.vhack.eu redlib.vhack.eu source.foss-syndicate.org source.vhack.eu ## Open ports TCP 22: ssh TCP 25: mail-smtp TCP 80: http TCP 443: https TCP 465: mail-smtp-tls TCP 993: mail-imap-tls TCP 995: mail-pop3-tls # server3 ## Virtual Hosts b-peetz.de mastodon.vhack.eu matrix.vhack.eu miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu openpgpkey.b-peetz.de openpgpkey.s-schoeffel.de openpgpkey.sils.li openpgpkey.vhack.eu peertube.vhack.eu trinitrix.vhack.eu vhack.eu ## Open ports TCP 22: ssh TCP 80: http TCP 443: https TCP 64738: ??? UDP 64738: ???
2025-03-09hosts/server2: Use new back configBenedikt Peetz
2025-03-09pkgs/back/package.nix: Include the html templates in the build sourceBenedikt Peetz
2025-03-09pkgs/back/config: Also try to open a repo if a directory with `.git` existsBenedikt Peetz
2025-03-09pkgs/back: Do not store repositories in configBenedikt Peetz
Otherwise, back will nee