2026-02-06 - 2026-08-06
Overview
87 Issues closed from 4 users
Closed
#410 archive wtmptail from salt to a separate repository, and remove it
Closed
#332 Set up prometheus exporters for php-fpm instances
Closed
#401 Use Type=notify for python-http-handlers
Closed
#376 Ingest exim logs into grafana
Closed
#412 Advertise TLS instead of STARTTLS in .well-known/autoconfig/mail
Closed
#318 Extract PVV-specified config from exim
Closed
#452 Firewall gitea runners to only be able to take requests from kommode
Closed
#428 Replace dbus with dbus-broker in salt
Closed
#199 Enable encryption for OpenVPN bridge between PVV and serverroom
Closed
#417 Clean up authorized_keys in salt
Closed
#411 Purge sane config from salt
Closed
#377 Replace promtail with fluentbit in salt
Closed
#186 Ask SoC for SSH exception for kommode
Closed
#408 Close udp 5432 on bicep firewall
Closed
#429 Pure arch/gentoo/redhat config from salt
Closed
#422 Configure fwupd in salt
Closed
#191 Make uptimekuma (or otherwise uptime status of some sort) more accessible to all users
Closed
#395 Run OPTIMIZE <db> on all mysql databases as a timed job
Closed
#384 Replace all nixos postfix instances with nullmailer
Closed
#388 Use better password algorithm for new postgresql password
Closed
#387 Disable atime for postgres/mariadb state directories
Closed
#400 Set up gatus monitoring for mariadb
Closed
#399 Set up gatus monitoring for postgresql
Closed
#390 Fix mojibake in distributed /etc/passwd
Closed
#372 Access logs for postgresql
Closed
#380 Disable irqbalancer on single CPU socket machines
Closed
#397 Fix principal backupscript rrsync failures
Closed
#302 Use BindPaths and systemd-tmpfiles for matrix-synapse storage on external disk
Closed
#375 Run the temmie userweb log splitter as a different service
Closed
#66 Add prometheus-node-exporter to salt
Closed
#149 Fix cron warnings for drolsum
Closed
#369 Downgrade node for mjolnir, or patch
Closed
#187 Fix mysqld exporter database connection
Closed
#371 Rotate push mirror api key for github
Closed
#206 Recover missing images for mediawiki
Closed
#304 Improve per-user root logging, allow setting username with envvar on login
Closed
#204 Evaluate scrutiny
Closed
#288 Fix NixOS polkit rule for defaulting to current user upon password request
Closed
#326 backup uptime-kuma state
Closed
#367 Backup /usr and /var for knudsen/ludvigsen
Closed
#156 Render bluemap maps on a different machine than bekkalokk
Closed
#263 Fix mediawiki deprecation warning
Closed
#146 Fix openstack networking
Closed
#286 Disable external firewall for ildkule in openstack
Closed
#366 Fix uptime-kuma
Closed
#364 Fix backup targets knudsen and ludvigsen
Closed
#296 Add roundcube's des_key to sops
Closed
#314 Add vaultwarden's rsa key to sops
Closed
#163 hostname is set to localhost on our nixos machines
Closed
#317 Fix new ildkule
Closed
#261 Fix QUIC support for bluemap
Closed
#361 Replace promtail
Closed
#327 Fix prometheus stats from gluttony
Closed
#365 Gitea is not being backed up properly
Closed
#37 Secret Vault
Closed
#76 Procmail_log errors
Closed
#150 Fix cron warnings for tom
Closed
#201 Replace switch below orchid
Closed
#312 update README to not use deprecated alias
Closed
#114 Stop eirin and demiurgen from serving mDNS service entries for every single user with a homepage
Closed
#262 Fix mediawiki package updating script
Closed
#357 Fix Demiurgen
Closed
#309 Building the skrott image does not set the date and time as file metadata.
Closed
#282 Fix the RAM shortage on lupine-4
Closed
#321 Fix VLAN config on port 18 on Nintendo
Closed
#42 Få inn disk i Birkeland
Closed
#351 Replace broken powermeter for lambdacube
Closed
#348 update netboot to v3 on knutsen
Closed
#349 Install CoW filesystems on lupine 1-5
Closed
#336 Upgrade OS version for hildring
Closed
#322 Fix the zfs pool on principal
Closed
#319 Update microbel
Closed
#347 Commit changes to nix configuration on the lupines
Closed
#113 Make skrott/dibbler rebuild automatically (or at least get updates somehow)
Closed
#343 Enable redis sessions for gitea
Closed
#325 backup matrix-ooye state
Closed
#329 Reinstate backups of ludvigsen
Closed
#328 Reinstate backups of knutsen
Closed
#333 Stop salt from overwriting keys in /root/.ssh/authorized_keys
Closed
#344 Fix gitea default theme option
Closed
#334 Upgrade OS version for sleipner
Closed
#335 Upgrade OS version for balduzius
Closed
#293 Fix drolsum
Closed
#342 Enable redis caching for gitea
Closed
#48 Make deployment scripts to dvask
Closed
#276 Automatically push DNS updates from ameno
Closed
#281 Deprecate ameno DNS services
136 Issues created by 6 users
Opened
#339 Set up a freebsd gitea runner
Opened
#340 Recover information about a bunch of machines to wiki from old webroot
Opened
#341 Authoritative DNS over IPv6
Opened
#342 Enable redis caching for gitea
Opened
#343 Enable redis sessions for gitea
Opened
#344 Fix gitea default theme option
Opened
#345 Members list
Opened
#346 Unpack gitea backup before zfs snapshot on principal
Opened
#347 Commit changes to nix configuration on the lupines
Opened
#348 update netboot to v3 on knutsen
Opened
#349 Install CoW filesystems on lupine 1-5
Opened
#350 Create new debian VM login box
Opened
#351 Replace broken powermeter for lambdacube
Opened
#352 Put assgore and toriel in the garbage bin
Opened
#353 Take joshua out of service
Opened
#354 Repurpose bukserud
Opened
#355 Baptize and install graciously provided OmegaV servers, and use them for something cool
Opened
#356 Set up docker images for gitea runners with ubuntu 26.04
Opened
#357 Fix Demiurgen
Opened
#358 Ephemeral VM runners for gitea
Opened
#359 Merge PVV-DNS repo into pvv-nixos-config
Opened
#360 Add metadata tags per machine in values.nix
Opened
#361 Replace promtail
Opened
#362 Document Matrix bots under services
Opened
#363 principal-backup-script: only do snapshots when something has changed
Opened
#364 Fix backup targets knudsen and ludvigsen
Opened
#365 Gitea is not being backed up properly
Opened
#366 Fix uptime-kuma
Opened
#367 Backup /usr and /var for knudsen/ludvigsen
Opened
#368 Consider moving the pvv-nixos-config documentation over to the wiki
Opened
#369 Downgrade node for mjolnir, or patch
Opened
#370 Create virtualhost for matrix synapse admin endpoints
Opened
#371 Rotate push mirror api key for github
Opened
#372 Access logs for postgresql
Opened
#373 Move gopher.pvv.ntnu.no to a proper server
Opened
#374 Send NOTIFY to DNS secondaries
Opened
#375 Run the temmie userweb log splitter as a different service
Opened
#376 Ingest exim logs into grafana
Opened
#377 Replace promtail with fluentbit in salt
Opened
#378 Set up apache prometheus exporter for httpd on temmie
Opened
#379 Configure auditing
Opened
#380 Disable irqbalancer on single CPU socket machines
Opened
#381 Set up graylisting for exim (again)
Opened
#382 Upgrade dovecot on microbel
Opened
#383 Split postgresql/mysql backups into per-db files
Opened
#384 Replace all nixos postfix instances with nullmailer
Opened
#385 Ensure hugepages are available to postgresql/mysql on bicep
Opened
#386 Set up pgbouncer for postgres
Opened
#387 Disable atime for postgres/mariadb state directories
Opened
#388 Use better password algorithm for new postgresql password
Opened
#389 Be lazier with access times on nixos machines by default
Opened
#390 Fix mojibake in distributed /etc/passwd
Opened
#391 Set up prometheus exporter for BIND
Opened
#392 Set up prometheus exporter for dovecot
Opened
#393 Create SRV + TXT records for caldav server
Opened
#394 Create .well-known redirects for caldav
Opened
#395 Run OPTIMIZE <db> on all mysql databases as a timed job
Opened
#396 nixos-upgrade.service: send notification on failure
Opened
#397 Fix principal backupscript rrsync failures
Opened
#398 Fix gatus monitoring for georg/brzęczyszczykiewicz
Opened
#399 Set up gatus monitoring for postgresql
Opened
#400 Set up gatus monitoring for mariadb
Opened
#401 Use Type=notify for python-http-handlers
Opened
#402 Set up matrix alerts for gatus
Opened
#403 PVV-net <--> Openstack VPN
Opened
#404 Add watchdog(s) for drumknotty subprocesses
Opened
#405 PVV PDS
Opened
#406 Remove statedir for uptimekuma and remove host from principal backup script
Opened
#407 Create backups for radicale
Opened
#408 Close udp 5432 on bicep firewall
Opened
#409 replace use of autofs with mount units in salt
Opened
#410 archive wtmptail from salt to a separate repository, and remove it
Opened
#411 Purge sane config from salt
Opened
#412 Advertise TLS instead of STARTTLS in .well-known/autoconfig/mail
Opened
#413 Fix renewal of turn.pvv.ntnu.no ACME cert
Opened
#414 Drop mariadb superusers for yorinad@spikkjeposche and pederbs@spikkjeposche
Opened
#415 Have a matrix bot subscribe to innsida varsler on matrix/discord
Opened
#416 archive detach from salt to a separate repository, replace it
Opened
#417 Clean up authorized_keys in salt
Opened
#418 Install qemu-guest-agent on VMs through salt
Opened
#419 Disable irqbalancer on microbel
Opened
#420 Disable apache2 on microbel
Opened
#421 Exim hardening
Opened
#422 Configure fwupd in salt
Opened
#423 Setup cups on terminals to work with NTNU printing service
Opened
#424 Make /tmp private per user on debian machines
Opened
#425 Migrate iptables rules in salt to use nftables
Opened
#426 Configure cronjobs via the cron salt module
Opened
#427 Create a kernel module banlist in salt
Opened
#428 Replace dbus with dbus-broker in salt
Opened
#429 Pure arch/gentoo/redhat config from salt
Opened
#430 Make use of nullmailer on non-microbel debian servers
Opened
#431 Replace gickup-based software mirrors with a fresh forgejo instance
Opened
#432 Enable wake-on-lan on most of our machines
Opened
#433 Configure debian user umasks to a safer default
Opened
#434 Mount everything except /usr/{sbin,bin,lib} with nosuid set
Opened
#435 Ensure we are using norwegian apt mirrors everywhere
Opened
#436 Set up tea on loginboxes and terminals
Opened
#437 Set up bw-cli on loginboxes and terminals
Opened
#438 Configure plocate in salt
Opened
#439 Add SRV records for coturn
Opened
#440 Add SRV records for SMTP, POP, IMAP
Opened
#441 Share a common APT proxy among all debian machines
Opened
#442 Set up binfmt and qemu+user compat on loginboxes and terminals
Opened
#443 Clean up microbel /etc
Opened
#444 Create better scripts to restore stuff from principal
Opened
#445 Clean up secrets in pillar
Opened
#446 Make sure all salt minions don't have access to each other's secrets
Opened
#447 Use window 0 and 1 or 1 and 2 for drumknoTTY
Opened
#448 Clean up UID/GIDs
Opened
#449 Move prometheus-node-exporter from standard to mandatory in salt
Opened
#450 Add validate-rsync script to salt
Opened
#451 Properly remove promtail from microbel
Opened
#452 Firewall gitea runners to only be able to take requests from kommode
Opened
#453 Remove zabbix from sleipner
Opened
#454 Add /usr/sbin to path on microbel (and possibly other machines)
Opened
#455 Set up firewall on sleipner
Opened
#456 Add dovecot config to salt
Opened
#457 Add spamd config to salt
Opened
#458 Add mailman config to salt
Opened
#459 Remove /home/pvv/t
Opened
#460 Fix renewal of alps.pvv.ntnu.no ACME cert on bekkalokk
Opened
#461 Uninstall distcc on most machines
Opened
#462 Provide aerc and meli on loginboxes
Opened
#463 Replace all use of tcpwrapper with firewall rules
Opened
#464 Disable avahi in salt
Opened
#465 Move fail2ban-mailman rules out of /etc on microbel
Opened
#466 Add fail2ban-mailman setup to salt
Opened
#467 Fix element-call
Opened
#468 File level duplication on pages.pvv.ntnu.no
Opened
#469 Kommode doesnt rebuild due to build error in gitea themes
Opened
#470 Add popularity-contest to salt
Opened
#471 Add gitea-runner healtchecks to gatus
Opened
#472 Explicitly allow broken mail headers on microbel in salt
Opened
#473 Ignore quota email bounces
Opened
#474 Host an iroh relay
69 Unresolved Conversations
Open
#97
Gitea: fix incoming mail
Open
#18
Configure mailman3
Open
#86
Move salt repository
Open
#280
Get the bicep hardware running again
Open
#241
Consider mounting nfs mounts with async
Open
#181
Configure robots.txt against scraping
Open
#202
Consider moving software mirrors out of gitea
Open
#192
Set up prometheus exporter for dibbler
Open
#72
Set up new userweb system on temmie (kill tom)
Open
#184
Minecraft map - live player markers via RCON
Open
#70
Setup S3 compliant blob storage
Open
#188
Add grafana dashboard for EXIM4 exporter
Open
#285
Fix external(?) IPv6 networking
Open
#289
Fix gitea access lists staying up to date
Open
#92
Monitor HDD/SSD health
Open
#211
Set up a proper alert system
Open
#219
Host gemini content alongside gopher
Open
#121
Fix spam detection / AV on microbel
Open
#265
Document setup of new NixOS hosts
Open
#316
New storage server
Open
#190
Update list of hosts in uptimekuma
Open
#59
Sette opp brannmur
Open
#105
Switch out the terminal room switch with one capable of gigabit speeds
Open
#74
Offsite Backup
Open
#67
Create new authentication/authorization system
Open
#50
Proof-of-concept OS oppdatering SIMH
Open
#79
Gjennopprette gamle nettsteder som knakelibrak hostet
Open
#94
Theme SimpleSamlPHP
Open
#107
Reignite dvask
Open
#109
Set up a group time slot tool (like when2meet)
Open
#129
pghero, a performance dashboard for Postgres
Open
#140
Use ACME certs everywhere
Open
#142
Create system for external gitea users
Open
#154
Replace nybruker.pl
Open
#162
add a sane .procmailrc to /etc/skel
Open
#209
Check microbel's gallery sync script into git and add to gitea Drift
Open
#256
Do a final backup of some service dbs on mysql and drop them
Open
#264
Install simplesamlphp-module-oidc module on idp
Open
#267
Create more nix-topology service extractors
Open
#273
Upstream the nixos module for snappymail
Open
#283
Set up ntfy service
Open
#300
Create landing pages for nginx hosts on all machines
Open
#305
Set up redirects for /.well-known/security.txt on most (if not all) CNAMEs
Open
#307
Configure automatic exports of minecraft-kartverket outputs to isvegg/mapcrafter
Open
#308
Set up firewall for incoming traffic on rwho port for all machines
Open
#324
Reduce OOYE's powerlevel from 100 down to something more sensible
Open
#330
Make IPv6 addresses more similar to IPv4 addresses
Open
#337
Get tallulah up and running again
Open
#152
Temporarily disable clamd + spamd on microbel
Open
#111
Evaluate stalwartlabs/mail-server
Open
#19
Document services
Open
#43
Docker daemon på arbeidsstasjoner
Open
#78
Nixifisering av Orchid
Open
#104
Create index for homepages
Open
#115
Host OpenPGP server or WKD for users
Open
#126
Set up nextcloud
Open
#132
User sourced stickers and emoticons
Open
#157
drift@pvv ticketting
Open
#177
Replace shared e-mail addresses (drift@, pvv@, styret@, etc)
Open
#164
Expose nixosModules.minimal-pvv-config for non Drift/pvv-nixos-config machines
Open
#168
p2p-vpn for PVV hosts?
Open
#169
Nginx fails if started before generate-snakeoil-certs.timer has ran once
Open
#278
Make mediawiki properly multilingual
Open
#303
Set up per-user root logging on nixos hosts
Open
#138
Fix remote logging
Open
#182
Improve SSH Server configuration security, new host keys
Open
#151
Fix mdadm SparesMissing warning for microbel
Open
#250
Theme nginx 5XX pages
Open
#242
reattempt spotify on georg