Commit Graph

575 Commits

Author SHA1 Message Date
oysteikt 526b55c49a {ildkule/prometheus,base}: send stats over HTTPS through nginx
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 6m36s
2026-06-13 02:54:28 +09:00
oysteikt e80189c6eb temmie/userweb: stop cating passwd on startup
Build topology graph / evals (push) Successful in 2m47s
Eval nix flake / evals (push) Successful in 9m7s
2026-06-13 01:41:05 +09:00
oysteikt 56a51e4c6f temmie/userweb: mount homedirs under /amd
Build topology graph / evals (push) Successful in 2m25s
Eval nix flake / evals (push) Successful in 6m20s
2026-06-13 01:39:20 +09:00
oysteikt f54109f6f3 temmie/userweb: set handlers for php and perl scripts
Build topology graph / evals (push) Successful in 4m9s
Eval nix flake / evals (push) Successful in 8m58s
2026-06-13 01:26:27 +09:00
oysteikt b848e0f1cc temmie/userweb: add log processor for apache
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 8m48s
2026-06-07 06:03:18 +09:00
oysteikt c671329b93 temmie/userweb: inject users from passwd into httpd sandbox
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 8m30s
2026-06-07 05:28:24 +09:00
oysteikt 2d6b09cb32 bikkje: label ports in firewall port list 2026-06-06 04:08:16 +09:00
oysteikt 88892115b5 base: enable autoScrub for all btrfs machine by default 2026-06-06 04:05:26 +09:00
oysteikt 8a290d30e7 modules/drumknotty: split into several parts
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (pull_request) Successful in 9m31s
Eval nix flake / evals (push) Successful in 6m50s
This also fixes a few issues, such as enabling `createLocalDatabase` for
multiple programs, and wraps all the screen logic within a screenrc
file. Some assertions were also added to avoid some easy-to-make
mistakes.
2026-06-05 14:21:35 +02:00
vegardbm 009d89f959 set default settings for worblehat and dibbler 2026-06-05 14:09:06 +02:00
vegardbm 7e754ade71 drumknotty: init 2026-06-05 14:08:58 +02:00
oysteikt 966081ebfc bicep/mysql: enable userstat
Build topology graph / evals (push) Successful in 2m45s
Eval nix flake / evals (push) Successful in 7m58s
2026-06-03 15:31:27 +09:00
oysteikt 39d313579c bicep/mysql: rotate slow query logs
Build topology graph / evals (push) Successful in 2m26s
Eval nix flake / evals (push) Successful in 6m23s
2026-06-03 15:21:18 +09:00
oysteikt 3386153b8b ildkule/prometheus/exim: make scheme explicit
Build topology graph / evals (push) Successful in 2m48s
Eval nix flake / evals (push) Successful in 7m3s
2026-06-03 13:35:13 +09:00
oysteikt 56906241f6 bekkalokk/roundcube: temporary fix for webmail redirects
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 6m28s
2026-06-01 03:52:09 +09:00
oysteikt 3fe71d21f6 bekkalokk/roundcube: webdir moved to public_html within package
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 8m55s
2026-06-01 02:57:43 +09:00
oysteikt 1ce3372683 lupine/binfmt: enable 2026-06-01 01:00:50 +09:00
adriangl 5f14c15679 feat: add radicale to bekkalokk
Build topology graph / evals (push) Successful in 2m43s
Eval nix flake / evals (push) Successful in 4m12s
2026-06-01 00:59:54 +09:00
oysteikt 64843087be kommode/gitea: only allow webhooks to external hosts
Build topology graph / evals (push) Successful in 2m30s
Eval nix flake / evals (push) Successful in 10m7s
We don't have any servers with intranet IPs, and we want webhooks that
hook back to kommode to pass through its firewall.
2026-05-29 12:58:26 +09:00
oysteikt 0c45345050 bicep/matrix-ooye harden
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 4m48s
2026-05-28 16:07:36 +09:00
oysteikt 788f23bf04 bicep/matrix-hookshot: harden
Build topology graph / evals (push) Successful in 2m23s
Eval nix flake / evals (push) Successful in 4m43s
2026-05-28 15:58:04 +09:00
oysteikt 8416014aeb bicep/mjolnir: harden 2026-05-28 15:58:04 +09:00
oysteikt 5bf0de1d0d bekkalokk/website/fetch-gallery: use proper shellscript builder 2026-05-28 03:58:08 +09:00
oysteikt a550bbf1e0 bekkalokk/roundcube: use specialized builder for nginx root dir 2026-05-28 03:46:59 +09:00
oysteikt 6d9bd8256f kommode/gitea/install-customization: disable networking
Build topology graph / evals (push) Successful in 3m27s
Eval nix flake / evals (push) Successful in 4m9s
2026-05-28 03:15:47 +09:00
oysteikt 5c859d9809 kommode/gitea/install-customization: remove ExecStart bash wrapper 2026-05-28 03:15:06 +09:00
oysteikt dfbed75cd9 kommode/gitea/gpg: remove ExecStart bash wrapper 2026-05-28 03:06:07 +09:00
oysteikt 6237a0a0e7 bicep/minecraft-heatmap: remove ExecStartPre bash wrapper 2026-05-28 03:03:38 +09:00
oysteikt bd2263a0a9 kommode/gitea/import-users: remove ExecStartPre bash wrapper 2026-05-28 03:02:59 +09:00
oysteikt 532e8b0eee bekkalokk/mediawiki: install PdfHandler extension
Build topology graph / evals (push) Successful in 2m40s
Eval nix flake / evals (push) Successful in 4m14s
2026-05-28 01:22:13 +09:00
oysteikt eef3f8fe8b bekkalokk/mediawiki: cleanup executable path config 2026-05-28 01:22:13 +09:00
oysteikt b0f81c9379 lupine/smartd: reenable
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 5m3s
2026-05-27 23:41:54 +09:00
oysteikt 2c819776f8 treewide/nginx: enable kTLS for a bunch more virtualHosts
Eval nix flake / evals (push) Failing after 2m45s
Build topology graph / evals (push) Successful in 3m51s
2026-05-27 23:36:18 +09:00
oysteikt 2b4817b75a ildkule/scrutiny: init 2026-05-27 23:33:45 +09:00
oysteikt 47a744f68f ildkule/uptime-kuma: set up rsync pull target for principal
Build topology graph / evals (push) Successful in 4m0s
Eval nix flake / evals (push) Successful in 4m14s
2026-05-26 13:37:29 +09:00
vegardbm da505d4fe2 kommode: sign merge commits and sign crud actions
Build topology graph / evals (push) Successful in 2m41s
Eval nix flake / evals (pull_request) Successful in 4m2s
Eval nix flake / evals (push) Successful in 4m5s
2026-05-25 20:21:23 +02:00
oysteikt 18ab1ef982 temmie/userweb: set -i and -t in sendmail wrapper
Build topology graph / evals (push) Successful in 2m23s
Eval nix flake / evals (push) Successful in 4m9s
2026-05-25 18:49:57 +09:00
oysteikt 5023edeb13 temmie/userweb: install mod_perl with custom env
Build topology graph / evals (push) Successful in 2m23s
Eval nix flake / evals (push) Successful in 4m2s
2026-05-25 18:24:23 +09:00
oysteikt 0d8c26c548 temmie/userweb: send propagatedBuildInputs through perl env wrapper
Build topology graph / evals (push) Successful in 2m22s
Eval nix flake / evals (push) Successful in 4m40s
2026-05-25 17:05:02 +09:00
oysteikt bd244e7797 temmie/userweb: add www2 server alias
Build topology graph / evals (push) Successful in 3m56s
Eval nix flake / evals (push) Successful in 4m49s
2026-05-25 16:24:35 +09:00
oysteikt e9220bb31e temmie/userweb: use www-datas UID + GID for backwards compat
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 4m36s
2026-05-25 15:25:26 +09:00
oysteikt 6beb9c62c3 temmie/userweb: use bro to proxy sendmail requests out of sandbox
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 4m7s
2026-05-25 15:02:40 +09:00
vegardbm 0319858cad Merge branch 'gluttony-bluemap'
Build topology graph / evals (push) Successful in 2m57s
Eval nix flake / evals (push) Successful in 4m18s
2026-05-25 03:32:15 +02:00
vegardbm efd50868e0 bekkalokk: add back config added through bluemap module
Eval nix flake / evals (pull_request) Successful in 5m24s
Eval nix flake / evals (push) Successful in 4m26s
2026-05-25 03:28:49 +02:00
vegardbm 7a23cf7f25 bekkalokk: remove bluemap 2026-05-25 03:28:30 +02:00
vegardbm 57963fadd7 gluttony: add private key and set public key for bekkalokk 2026-05-25 03:22:13 +02:00
vegardbm 792f111a5d bekkalokk: pull rendered map from gluttony 2026-05-25 03:22:13 +02:00
vegardbm b27859c0fa gluttony: export rendered bluemap to bekkalokk 2026-05-25 03:22:09 +02:00
vegardbm c59c00f3fc gluttony: setup bluemap 2026-05-25 03:20:21 +02:00
danio 09163b77da Revert "bicep/matrix/livekit: open the rtc ports"
Build topology graph / evals (push) Successful in 2m49s
Eval nix flake / evals (push) Successful in 5m24s
This reverts commit 4a67eddf52.
2026-05-23 23:23:41 +02:00