aboutsummaryrefslogtreecommitdiffstats
path: root/system (unfollow)
Commit message (Collapse)Author
2025-01-25feat(system): removeSilas Schöffel
This only contains unused and unwanted services
2025-01-25feat(modules/mail): init on server2Silas Schöffel
2025-01-21feat(modules/backup): initSilas Schöffel
2025-01-21feat(modules/matrix): init on server3Silas Schöffel
2025-01-21feat(modules/mastodon): init on server3Silas Schöffel
2025-01-20feat(modules/murmur): initSilas Schöffel
2025-01-20feat(modules/nixconfig): initSilas Schöffel
2025-01-20feat(modules/invidious-router): initSilas Schöffel
2025-01-20feat(miniflux): init module, host on server2Silas Schöffel
2025-01-20feat(treewide): rekey secrets to allow multiple host setupSilas Schöffel
2024-12-25refactor(system/services/fail2ban): Migrate to `by-name`Benedikt Peetz
Additionally, I've changed to owner of the `/var/lib/fail2ban` directory to `root:root` as the main `fail2ban` service also runs under `root` and a `fail2ban` user is never created.
2024-12-25refactor(system/services/rust-motd): Migrate to `by-name`Benedikt Peetz
2024-12-25fix(system): Remove out-dated importsBenedikt Peetz
Both of these modules have been moved to `by-name`
2024-12-25refactor(system/users): Migrate to `by-name`Benedikt Peetz
2024-12-24refactor(modules/impermanence): Migrate to by-name while distributing modsBenedikt Peetz
2024-12-23style(treewide): FormatBenedikt Peetz
2024-12-21fix(modules/disko): Remove deprecated legacy type and migrate to `by-name`Benedikt Peetz
2024-12-21fix(system/services/mastodon): Update char patch to v4.3Benedikt Peetz
2024-12-20refactor(system/services/libreddit): Migrate to `by-name`Benedikt Peetz
This also includes a rename into `redlib` because of upstream changes.
2024-12-19build(system/services/taskserver/certs/generate): Convert to `nix-shell`Benedikt Peetz
Lix does not support the newer `nix shell` shebang.
2024-12-06fix(system/services/invidious-router): remove_no_ratio = falseSilas Schöffel
2024-11-16fix(system/services/libreddit): Use unstable `redlib` versionBenedikt Peetz
The current stable version has a bug with regard to parsing the current reddit json responses.
2024-11-03docs(system/services/matrix): Fix typos in commentBenedikt Peetz
2024-10-05feat(taskserver/certs/ca.certs.pem): Regenerate certificateBenedikt Peetz
2024-10-05refactor(taskserver/certs): Format scripts and allow selecting which certs ↵Benedikt Peetz
to generate
2024-10-05chore(taskserver/certs/ca.key.pem.gpg): reencrypt with new keys as recipientsSilas Schöffel
2024-10-04fix(system/services/invidious-router): Use the unstable pkgBenedikt Peetz
This has been updated to provide a means to send the user to YouTube, if no invidious instances are available.
2024-09-18fix(system/services/invidious-router): Set health check path to a video URLBenedikt Peetz
The main page does sometimes load, but videos are still not playable. This new path really checks, whether the instance works.
2024-09-06fix(system/impermanence): Persist `/var/lib/nixos`Benedikt Peetz
Otherwise, the mapping of uid/gid to user name or group name could change between reboots, which would result in magically change permissions. We were already affected by this at some point, so just remove the possibility of it happening again.
2024-09-06fix(services/matrix/mautrix-whatsapp): Disable to remove libolmBenedikt Peetz
Libolm is marked as insecure and must thus be removed from the system closure.
2024-08-19fix(system/services/invidious-router): Stop filtering regionsSilas Schöffel
Filtering regions limits our possible instance selection without actually providing great value. Let's stop discriminating based on server location.
2024-08-16feat(system/services/mastodon): Apply patch to increase the message lengthBenedikt Peetz
2024-08-14fix(disks): Increase root tmpfs size to 6GBBenedikt Peetz
The 2GB are just not enough.
2024-08-02refactor(nixos/openssh): Migrate from `system/services`Benedikt Peetz
2024-08-02refactor(nixos/{nginx, nix-sync}): Migrate from `system/services`Benedikt Peetz
Nix-sync was sort-of mixed into the nginx configuration, thus separating it completely seemed reasonable.
2024-07-11fix(nginx): add gallery.s-schoeffel.deSilas Schöffel
2024-06-28style(system/services/mastodon): Remove forgotten `pkgs-unstable`Benedikt Peetz
2024-06-28fix(peertube): Activate smtp supportBenedikt Peetz
2024-06-15fix(nix-sync): Change last occurrences of `repo.path` to `repoPath`Benedikt Peetz
Using `repo.path` (with the slash on the end) results in operations on the directory, which is the symlink target. Using `repoPath` (without the slash) instead results in the intended operations on the symlink itself.
2024-06-13refactor(modules/etesync): Move to a complete moduleBenedikt Peetz
2024-06-13fix(impermanence): Re-active etesync moduleBenedikt Peetz
2024-06-11fix(libreddit): Remove manual module overrideBenedikt Peetz
The fixes have been up streamed into `nixpkgs` by now.
2024-06-11fix(etesync-server): Re-activateBenedikt Peetz
2024-06-05fix(fail2ban): increase max retry number to 7Silas Schöffel
2024-06-05fix(nix-sync): Don't try to exit in a subshellBenedikt Peetz
The `(cmd1 && cmd2)` pattern works, but fails with commands like `exit` as the parentheses start a new subshell, which the `exit` command will then close instead of exiting the main shell. The curly brackets have the intended effect here, as they simply group the commands together.
2024-06-05fix(nix-sync): Ensure that the `target` for `ln` never ends with a `/`Benedikt Peetz
Otherwise, `ln` tries to create the symlink _in_ the target directory.
2024-06-05fix(nix-sync): Add code-path to create a repo's path, if absentBenedikt Peetz
2024-06-01fix(nix-sync): Ensure that the service can write to all needed pathsBenedikt Peetz
Previously, the generated service _could_ write to the directory, but wanted to create the directory, if it was absent. Creating this directory, requires to be able to write in the parent directory. This is fixed, by ensuring that the parent directories are included.
2024-06-01fix(treewide): stop using none-existent etebase user and groupSilas Schöffel
2024-06-01fix(nix-sync): Explicitly set the `network-online.target` dependencyBenedikt Peetz