nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	fix(system/services/taskserver/certs): Move cert generation to script	Soispha	2023-11-07
\| \| \| \| \| \|	This fully removes the human-factor and allows it to just run `./generate` to generate all required certificates and keys (with the needed extra keys and certificates)
*	feat(system/services/taskserver): Add a way to connect users together	Soispha	2023-10-17
\|
*	fix(system/services/taskserver): Disable debug	Soispha	2023-10-17
\|
*	fix(system/services/taskserver): Activate debug	Soispha	2023-10-16
\|
*	fix(system/services/taskserver): Use correct key name (`key.pem`)	Soispha	2023-10-16
\|
*	fix(system/services/taskserver): Switch to strings instead of paths	Soispha	2023-10-16
\|
*	fix(system/services/taskserver): Store the self-signed ca key in agenix	Soispha	2023-10-16
\|
*	feat(system/services/taskserver): Integrate Let's Encrypt certificates	Soispha	2023-10-16
\| \| \| \| \| \| \| \| \| \| \| \|	The current setup now runs the `taskserver.vhack.eu` domain with a Let's Encrypt certificate and additionally uses a self-signed CA certificate to validate clients. The shell scripts used to generate the CA certificate and the derived client certificate (and keys) are taken nearly unmodified from the upstream repository [1]. [1]: https://github.com/GothenburgBitFactory/taskserver/tree/9794cff61e56bdfb193c6aa4cebb57970ac68aef/pki
*	fix(system/services/taskserver): declare certs/keys in pki.manual	sils	2023-10-16
\|
*	feat(system/services/taskserver): change ca to letsencrypt	sils	2023-10-16
\|
*	fix(system/services/taskserver): Hide organisations	Soispha	2023-10-16
\|
*	refactor(system/services/redirects): Move under the nginx directory	Soispha	2023-10-14
\|
*	fix(system/services/redirects): disable ssl	sils	2023-10-14
\|
*	Feat(system/services/redirects): Build up the base to comply with the AGPL	Soispha	2023-10-14
\|
*	Style(treewide): Merge attrs together	Soispha	2023-10-14
\|
*	fix(system/services/miniflux): Set correct subdomain, but leave alias	Soispha	2023-10-13
\|
*	fix(system/services/mastodon): Correctly avoid string casts	Soispha	2023-10-13
\|
*	Revert "fix(system/services/mastodon): remove unneccessary stringcasts"	sils	2023-10-13
\| \| \| \| \| \|	These stringcasts were mandatory. This reverts commit cfdd2e350ff5df55beef4fa5b7bc11e9ff5e23c1.
*	fix(system/services/mastodon): remove unneccessary stringcasts	sils	2023-10-13
\|
*	fix(system/services/mastodon): change string to list of string	sils	2023-10-12
\|
*	fix(system/services/mastodon): add nginx to group 'mastodon'	sils	2023-10-12
\|
*	fix(system/services/mastodon): allow registration only with vhack.eu/sils.li ↵	sils	2023-10-12
\| \| \| \|	mail
*	fix(system/services/mastodon): separate domains for user handles and ↵	sils	2023-10-12
\| \| \| \|	webinterface
*	feat(system/services): actually import mastodon	sils	2023-10-12
\|
*	fix(system/services/mastodon): correct age secret path	sils	2023-10-12
\|
*	feat(treewide): add mastodon	sils	2023-10-12
\|
*	feat(system/services/nix): add wheel group to trusted-users	sils	2023-10-11
\|
*	fix(system/services/murmur): Allow murmur's user to read certs	Soispha	2023-10-03
\|
*	feat(system/services/murmur): Initialize	Soispha	2023-10-03
\|
*	fix(system/services/miniflux): Reduce password length	Soispha	2023-10-03
\|
*	fix(system/services/miniflux): Correctly specify secret path	Soispha	2023-10-03
\|
*	feat(system/services/miniflux): Init	Soispha	2023-10-03
\|
*	fix(system/services/taskserver): Use strict certificate validation	Soispha	2023-10-02
\|
*	fix(system/services/taskserver): Specify domain to listen on	Soispha	2023-10-01
\|
*	feat(system/services/taskserver): Init	Soispha	2023-10-01
\| \| \| \| \|	This is the server part used in combination with Taskwarrior to regain control over the unwieldy amount of task, that accumulate over the day.
*	Fix(system/services/nginx): Update hosts	Soispha	2023-08-18
\|
*	Chore(Changelog): Delete branch specific changelogs	Soispha	2023-08-18
\|
*	Fix(system/services/libreddit): Don't open firewall	Soispha	2023-08-18
\|
*	Fix(system/services/libreddit): Actually proxy services via nginx	Soispha	2023-08-18
\|
*	Feat(system/services/libreddit): Init	Soispha	2023-08-18
\|
*	chore(version): v0.9.0	sils	2023-08-13
\|
*	Fix(system/secrets): Tell (r)agenix new location of invidious hmac secret	sils	2023-08-13
\|
*	chore(version): v0.8.0	Soispha	2023-08-11
\|
*	Chore(Merge): Branch 'invidious'	Soispha	2023-08-11
\|\
\| *	Fix(system/services/invidious): Add interpreter to start script	Soispha	2023-08-11
\| \|
\| *	Fix(system/services/invidious): Force the new script option to be applied	Soispha	2023-08-11
\| \|
\| *	Fix(system/service/invidious): Copy their script, to remove shell escape	Soispha	2023-08-11
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	The default ExecStart implementation in the module, escapes all stings. This does not work for us because we need to use the `$CREDENTIALS_DIR` environment variable, for the credentials deployed in den `LoadCredential` option
\| *	Fix(system/services/invidious): Set correct access permissions on hmac	Soispha	2023-08-11
\| \|
\| *	Fix(system/services/invidious): Check tables on startup	Soispha	2023-08-11
\| \|
\| *	Refactor(system/secrets/invidious): Remove unneeded files and improve names	Soispha	2023-08-11
\| \|