Commit Graph

807 Commits

Author SHA1 Message Date
oysteikt 0c5cb3c64f flake.nix: set default hostname for most nixos hosts 2026-02-17 08:41:16 +01:00
oysteikt 5bb13f4d06 bikkje: set hostName 2026-02-17 08:41:16 +01:00
oysteikt ad74a3e377 hosts/various: use systemd-boot as default bootloader 2026-02-17 08:41:16 +01:00
oysteikt 0b5eb548c0 hosts/various: remove empty environment.systemPackages lists 2026-02-17 08:41:16 +01:00
oysteikt 6024d02bac base: move package list to separate file 2026-02-17 08:41:16 +01:00
oysteikt bd816899e4 base: provide reasoning for packages, add a few new ones 2026-02-17 08:41:16 +01:00
oysteikt a322a66121 modules/grzegorz: override base certificate config 2026-02-17 08:41:16 +01:00
oysteikt 9f3524e8dd base: disable fontconfig by default 2026-02-17 08:41:16 +01:00
oysteikt 2378f7840d base: disable hibernation and sleep 2026-02-17 08:41:16 +01:00
oysteikt 846deb4185 base: no mutable users by default 2026-02-17 08:41:16 +01:00
oysteikt b34a2f0332 base/nginx: return 444 on fqdn virtualHost by default 2026-02-17 08:41:16 +01:00
oysteikt 370dfc4b41 nix-topology: remove postgresql icon override 2026-02-17 08:41:16 +01:00
oysteikt 4fa3466112 flake.lock: bump 2026-02-17 08:41:16 +01:00
oysteikt 4a328c3234 bekkalokk/well-known: reply to well-known for all domains 2026-02-17 08:41:16 +01:00
oysteikt 190a8334b4 bicep/element: fetch correct well-known file 2026-02-17 08:41:16 +01:00
oysteikt ed382bd9d4 packages/ooye: bump 2026-02-17 08:41:16 +01:00
oysteikt ea013572b5 modules/ooye: calm yo ass (set restart timer + counter) 2026-02-17 08:41:16 +01:00
oysteikt c302d26a96 bicep/matrix: remove some whitespace lol 2026-02-17 08:41:16 +01:00
oysteikt 2ac9ae84f6 update and fix `packages.out-of-your-element 2026-02-17 08:41:16 +01:00
oysteikt a1c06aae32 bicep/sshguard: disable
sshguard doesn't actually work as it currently stands, also the builtin
PerSourcePenalty functionality in SSH is more aggressive than sshguard
is able to catch anyway. It might've been reasonable if we were using it
for anything other than SSH, but it doesn't seem like we are.
2026-02-17 08:41:16 +01:00
oysteikt 1ac9fe5fbd bicep/matrix: use sops templates to render structured files 2026-02-17 08:41:16 +01:00
oysteikt 9e3770ab27 bicep/matrix: have element-web source well-known from config 2026-02-17 08:41:16 +01:00
oysteikt d8dd9d7a1f bicep/matrix: add synapse config to help with livekit 2026-02-17 08:41:16 +01:00
oysteikt e8c006e067 bicep/matrix: attempt to set up livekit 2026-02-17 08:41:16 +01:00
oysteikt 87986b7a18 bicep/matrix: add module for adding stuff to well-known 2026-02-17 08:41:16 +01:00
felixalb fcc8765f60 Fix the heccin quotes 2026-02-17 08:41:16 +01:00
oysteikt b2319c7598 ildkule: unbreak eval 2026-02-17 08:41:16 +01:00
vegardbm 7d7bec8f20 hosts/gluttony: init (!119)
Reviewed-on: #119
Reviewed-by: Felix Albrigtsen <felixalb@pvv.ntnu.no>
Co-authored-by: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
Co-committed-by: Vegard Bieker Matthey <VegardMatthey@protonmail.com>
2026-02-17 08:41:16 +01:00
oysteikt fa4550dc6f flake.lock: bump minecraft-kartverket 2026-02-17 08:41:16 +01:00
frero 5c72ef7764 bekkalokk/qotd: init 2026-02-17 08:41:16 +01:00
oysteikt 19cd0e6fa5 flake.lock: bump pvv-nettsiden 2026-02-17 08:41:16 +01:00
oysteikt 7c0a233f7e base/polkit: default to username if in group wheel 2026-02-17 08:41:16 +01:00
oysteikt 0040c310f0 flake.lock: bump minecraft-kartverket 2026-02-17 08:41:16 +01:00
oysteikt 3826c94fe3 flake.lock: bump 2026-02-17 08:41:16 +01:00
oysteikt 17399d00e3 flake.lock: bump minecraft-kartverket 2026-02-17 08:41:16 +01:00
oysteikt 2d6a810e97 modules/gickup: fix linktree config eval 2026-02-17 08:41:16 +01:00
oysteikt 407451393d secrets/*/*: update keys 2026-02-17 08:41:16 +01:00
vegardbm b34356b9ce add vegardbm to sops.yaml 2026-02-17 08:41:16 +01:00
oysteikt 1b0fd4a37e flake.lock: bump 2026-02-17 08:41:16 +01:00
oysteikt a28c8daf44 modules/gickup: run linktree after gickup fetches are done 2026-02-17 08:41:16 +01:00
oysteikt 72c0721d0d bicep/git-mirrors: fix cgit config 2026-02-17 08:41:16 +01:00
oysteikt 9c356db2b2 ildkule/journald-remote: move LoadCredential to correct unit 2026-02-17 08:41:16 +01:00
oysteikt c34c3415c1 base/packages: add net-tools 2026-02-17 08:41:16 +01:00
oysteikt 7df87c61d5 journald-upload: use ipv4 temporarily, restrict firewall to ildkule 2026-02-17 08:41:16 +01:00
oysteikt 7278e57edf journald-{remote,upload}: init 2026-02-17 08:41:16 +01:00
oysteikt 3346698daf temmie: mount nfs shares from microbel 2026-02-17 08:41:16 +01:00
oysteikt 7cd7f82f75 hosts/temmie: init 2026-02-17 08:41:16 +01:00
oysteikt 50b231db0a bekkalokk/bluemap: include markers with concatenation 2026-02-17 08:41:16 +01:00
oysteikt fea9c3b08e Move deployment section from dev docs to README, add warning 2026-02-17 08:41:16 +01:00
oysteikt 45d463f7de base/auto-upgrade: display build logs in journalctl 2026-02-17 08:41:16 +01:00