nixos-server - nixos-config for vhack.eu servers https://vhack.eu

	Commit message (Collapse)	Author	Age
*	pkgs/sharkey: 2025.2.2 -> 2025.2.3	Benedikt Peetz	30 hours
\| \| \| \|	There is no change log, as this is a security update.
*	tests/sharkey-image: Rename to `sharkey-cpu`	Benedikt Peetz	4 days
\| \| \| \|	Image upload still fails, even with this test passing.
*	modules/sharkey: Ensure, that it can access the host's CPUs	Benedikt Peetz	5 days
\| \| \| \|	This is, for some reason, needed for image uploads to sharkey.
*	tests/email-http: Use the factored out DNS server	Benedikt Peetz	6 days
\|
*	tests/email-http: Test the http self-service availability	Benedikt Peetz	6 days
\|
*	modules/stalwart-mail: Explicitly list out valid password hashes	Benedikt Peetz	6 days
\| \| \| \| \| \|	If a password hash does not match stalwart's know ones, it will just treat it as plaintext. This is obviously very bad, and should be avoided.
*	test/sharkey: Init	Benedikt Peetz	7 days
\| \| \| \| \| \| \| \|	We can't test that much, as user creation and general configuration seems to be locked behind completing a point and click adventure, once Sharkey is actually setup. As such, we simply test, that Sharkey starts and provides its default HTML.
*	tests/{common,email-dns}: Move last part of acme and dns handling to common	Benedikt Peetz	7 days
\| \| \| \|	This makes re-using it even easier.
*	tests/email-dns: Factor out all of the secrets/acme stuff into a common dir	Benedikt Peetz	7 days
\| \| \| \|	This makes it easier to re-use this test data for various tests.
*	{modules,test}/taskchampion-sync: Init	Benedikt Peetz	2025-04-11
\|
*	tests/email-dns/secrets/dkim/gen_key.sh: Add shellcheck shell	Benedikt Peetz	2025-04-01
\|
*	tests/dns: Avoid tracing the name-server interfaces	Benedikt Peetz	2025-04-01
\|
*	tests/email-dns/secrets: Re-key secrets, so that soispha and sils can read them	Benedikt Peetz	2025-03-27
\| \| \| \| \| \|	Doing a full `ragenix --rekey --idenitity <soispha.age.key>` run will fail, if there are secrets that she cannot decrypt. Thus encrypt the test secrets with all keys.
*	{modules,tests}/back: Update to deal with newest back	Benedikt Peetz	2025-03-09
\|
*	modules/stalwart-mail: Remove now unneeded `allowInsecureSmtp` option	Benedikt Peetz	2025-03-09
\|
*	tests/email-dns: Init	Benedikt Peetz	2025-03-09
\| \| \| \| \| \| \|	This test is somewhat involved, but tries to exercise our full mail handling capabilities. It effectively only tests that alice can send a message to bob, but it checks nearly all security mechanisms (DNSSEC is currently still missing).
*	test/email-ip: Rename from the general `email` test	Benedikt Peetz	2025-03-09
\|
*	{modules,tests}/dns: Init	Benedikt Peetz	2025-03-09
\| \| \| \|	Most of the dns module was taken from: <https://github.com/nix-community/dns.nix>
*	tests/email: Test the mvp	Benedikt Peetz	2025-03-09
\|
*	fix(modules/back): Remove the `gitPath` from the service name	Benedikt Peetz	2024-12-25
\| \| \| \|	With it, the service names become nearly illegible.
*	fix(modules/git-server): Use `vhack.persist` for data-directories	Benedikt Peetz	2024-12-25
\| \| \| \| \|	This avoids having to create them manually on the server and is, overall just generally a better way to solve this problem.
*	feat(tests/back): Init	Benedikt Peetz	2024-12-24
\|
*	refactor({modules,test}): Migrate to a `by-name` structure	Benedikt Peetz	2024-12-20