Commit Graph

1031 Commits

Author SHA1 Message Date
oysteikt 6bc767de6a WIP: temmie/userweb: add log processor for apache
Eval nix flake / evals (push) Successful in 4m36s
2026-05-26 00:12:34 +09:00
oysteikt 18ab1ef982 temmie/userweb: set -i and -t in sendmail wrapper
Build topology graph / evals (push) Successful in 2m23s
Eval nix flake / evals (push) Successful in 4m9s
2026-05-25 18:49:57 +09:00
oysteikt 5023edeb13 temmie/userweb: install mod_perl with custom env
Build topology graph / evals (push) Successful in 2m23s
Eval nix flake / evals (push) Successful in 4m2s
2026-05-25 18:24:23 +09:00
oysteikt 0d8c26c548 temmie/userweb: send propagatedBuildInputs through perl env wrapper
Build topology graph / evals (push) Successful in 2m22s
Eval nix flake / evals (push) Successful in 4m40s
2026-05-25 17:05:02 +09:00
oysteikt bd244e7797 temmie/userweb: add www2 server alias
Build topology graph / evals (push) Successful in 3m56s
Eval nix flake / evals (push) Successful in 4m49s
2026-05-25 16:24:35 +09:00
oysteikt e9220bb31e temmie/userweb: use www-datas UID + GID for backwards compat
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 4m36s
2026-05-25 15:25:26 +09:00
oysteikt 6beb9c62c3 temmie/userweb: use bro to proxy sendmail requests out of sandbox
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 4m7s
2026-05-25 15:02:40 +09:00
oysteikt 7429b334ca README: add temmie to machine overview
Build topology graph / evals (push) Successful in 2m44s
Eval nix flake / evals (push) Successful in 6m12s
2026-05-25 11:59:17 +09:00
oysteikt 1595f67c55 flake.nix: allow nvidia-kernel-modules for wenche
Build topology graph / evals (push) Successful in 2m39s
Eval nix flake / evals (push) Successful in 6m20s
2026-05-25 11:35:25 +09:00
oysteikt 3f5eadcb87 base/resolved: use RFC42 format
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Failing after 3m12s
2026-05-25 10:40:04 +09:00
oysteikt 70c0ad8724 base: use RFC42 format for systemd.sleep 2026-05-25 10:40:04 +09:00
oysteikt 61ea0181a1 packages/mediawiki-extensions: REL1_44 -> REL1_45 2026-05-25 10:40:04 +09:00
oysteikt 3e22c1a47e nixpkgs 26.05 🎉 2026-05-25 10:40:02 +09:00
vegardbm 0319858cad Merge branch 'gluttony-bluemap'
Build topology graph / evals (push) Successful in 2m57s
Eval nix flake / evals (push) Successful in 4m18s
2026-05-25 03:32:15 +02:00
vegardbm efd50868e0 bekkalokk: add back config added through bluemap module
Eval nix flake / evals (pull_request) Successful in 5m24s
Eval nix flake / evals (push) Successful in 4m26s
2026-05-25 03:28:49 +02:00
vegardbm 7a23cf7f25 bekkalokk: remove bluemap 2026-05-25 03:28:30 +02:00
vegardbm 57963fadd7 gluttony: add private key and set public key for bekkalokk 2026-05-25 03:22:13 +02:00
vegardbm 792f111a5d bekkalokk: pull rendered map from gluttony 2026-05-25 03:22:13 +02:00
vegardbm b27859c0fa gluttony: export rendered bluemap to bekkalokk 2026-05-25 03:22:09 +02:00
vegardbm eb0eb6d93b add bekkalokk to known_hosts 2026-05-25 03:20:25 +02:00
vegardbm 6a943dd7b0 bluemap: set group to nginx only if nginx is enabled 2026-05-25 03:20:25 +02:00
vegardbm c59c00f3fc gluttony: setup bluemap 2026-05-25 03:20:21 +02:00
oysteikt 53670b4d05 flake.nix/inputs/disko: v1.11.0 -> v1.13.0
Eval nix flake / evals (push) Successful in 6m2s
Build topology graph / evals (push) Successful in 2m51s
2026-05-24 23:05:48 +09:00
oysteikt d92a5f13ad base/journald-upload: fix target url
Eval nix flake / evals (push) Successful in 4m18s
Build topology graph / evals (push) Successful in 4m11s
2026-05-24 16:41:54 +09:00
oysteikt 16d3251ee2 shells/cuda: fix deprecated package attr warnings
Eval nix flake / evals (push) Successful in 4m17s
Build topology graph / evals (push) Successful in 4m19s
2026-05-24 15:23:33 +09:00
danio 09163b77da Revert "bicep/matrix/livekit: open the rtc ports"
Build topology graph / evals (push) Successful in 2m49s
Eval nix flake / evals (push) Successful in 5m24s
This reverts commit 4a67eddf52.
2026-05-23 23:23:41 +02:00
vegardbm 6cca1db3b3 bekkalokk: fix permissions for mediawiki secrets
Build topology graph / evals (push) Successful in 2m29s
Eval nix flake / evals (push) Successful in 4m21s
Eval nix flake / evals (pull_request) Successful in 3m49s
2026-05-22 20:21:24 +02:00
vegardbm bfd83c4c64 uptime-kuma: wants to use /var/lib/private for state
Build topology graph / evals (push) Successful in 2m32s
Eval nix flake / evals (push) Successful in 3m49s
2026-05-22 17:58:00 +02:00
oysteikt 9a6fdecb03 kommode/gitea/dump: only keep a single dump at a time
Eval nix flake / evals (push) Successful in 3m54s
Build topology graph / evals (push) Successful in 3m59s
2026-05-22 18:27:57 +09:00
oysteikt 82ab97fb45 bekkalokk/roundcube: restart service on changed sops secrets
Build topology graph / evals (push) Successful in 3m35s
Eval nix flake / evals (push) Successful in 3m49s
2026-05-22 18:10:44 +09:00
oysteikt 543fd19f8d bekkalokk/vaultwarden: restart service on changed sops secrets 2026-05-22 18:10:40 +09:00
oysteikt 6f99fa575d bekkalokk/vaultwarden: render environment_file as sops template
Eval nix flake / evals (push) Successful in 4m1s
2026-05-22 18:02:13 +09:00
oysteikt 3141b1f76b bekkalokk/vaultwarden: remove redundant hardening
Eval nix flake / evals (push) Successful in 3m51s
This has already been upstreamed
2026-05-22 17:51:03 +09:00
oysteikt 475f6a8c9b bekkalokk/vaultwarden: add rsa key to sops
Eval nix flake / evals (push) Successful in 4m25s
2026-05-22 17:49:31 +09:00
oysteikt 9c1687f8f2 bekkalokk/vaultwarden: use envvar keys
It seems like the nixpkgs module is compensating for previous config
that might've ended up in a file, which are now being turned into
screaming snake case environment variables. Let's just name them as they
are supposed to be named instead of having the upstream module translate
them.
2026-05-22 17:08:31 +09:00
oysteikt 0f53bcd731 bekkalokk/roundcube: add des_key to sops 2026-05-22 17:08:31 +09:00
felixalb f433ae1e15 ustetind: remove from sops
Build topology graph / evals (push) Successful in 2m30s
Eval nix flake / evals (push) Successful in 4m45s
rg -. to the rescue
2026-05-22 10:01:15 +02:00
oysteikt 5745648f87 bicep/postgres/repack: use local unix socket
Build topology graph / evals (push) Successful in 2m48s
Eval nix flake / evals (push) Successful in 4m22s
2026-05-22 15:59:59 +09:00
oysteikt 2c34a93abf bicep/postgres/repack: don't kill connections on timeout
Eval nix flake / evals (push) Successful in 3m51s
Build topology graph / evals (push) Successful in 3m56s
2026-05-22 15:57:57 +09:00
oysteikt 9ebc947eab ustetind: bai bai 👋
Build topology graph / evals (push) Successful in 2m48s
Eval nix flake / evals (push) Successful in 6m47s
2026-05-22 15:41:28 +09:00
oysteikt 6fcc19f0a2 base/fluentbit: init
Build topology graph / evals (push) Successful in 2m51s
Eval nix flake / evals (push) Successful in 4m7s
2026-05-22 15:32:13 +09:00
oysteikt 9224f04bd1 base/promtail: remove 2026-05-22 15:32:13 +09:00
vegardbm 9c93f15569 change agekey for ildkule and update keys
Build topology graph / evals (push) Successful in 2m31s
Eval nix flake / evals (push) Successful in 5m8s
update keys
2026-05-21 17:27:11 +02:00
oysteikt 5d6c153007 kommode/gitea: fix dump command
Build topology graph / evals (push) Successful in 2m33s
Eval nix flake / evals (push) Successful in 4m1s
2026-05-21 17:54:54 +09:00
oysteikt 8b483a92f8 ildkule: set fsType for bindmounts 2026-05-21 17:52:47 +09:00
oysteikt 0d7f05e56d bicep/postgres: add cleanup timers
Build topology graph / evals (push) Successful in 2m53s
Eval nix flake / evals (push) Successful in 4m6s
2026-05-21 04:14:34 +09:00
danio 4a67eddf52 bicep/matrix/livekit: open the rtc ports
Build topology graph / evals (push) Successful in 3m55s
Eval nix flake / evals (push) Successful in 4m8s
2026-05-20 20:04:33 +02:00
oysteikt 08a23bd380 base/hardening: ban a few more modules
Build topology graph / evals (push) Successful in 2m53s
Eval nix flake / evals (push) Successful in 4m2s
2026-05-20 23:15:25 +09:00
oysteikt 28b67c3578 base/mitigations: blacklist modules for copyfail and pintheft 2026-05-20 23:15:25 +09:00
vegardbm e5804c043a README: add gluttony
Build topology graph / evals (push) Successful in 2m52s
Eval nix flake / evals (push) Successful in 4m7s
2026-05-20 06:24:26 +02:00