oysteikt
4f6c731d25
flake.lock: bump pvv-nettsiden
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 7m7s
2026-07-25 20:51:24 +09:00
oysteikt
ee718563c8
bicep/postgresql: don't open udp 5432 in firewall
Build topology graph / evals (push) Successful in 2m12s
Eval nix flake / evals (push) Successful in 6m43s
2026-07-25 07:35:42 +09:00
oysteikt
fcc06d47c2
base/sshd: accept some useful envvars
Build topology graph / evals (push) Successful in 2m13s
Eval nix flake / evals (push) Successful in 7m58s
2026-07-24 16:03:54 +09:00
oysteikt
d13df223bf
bicep/mysql: add timed jobs for analyze and optimize
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m51s
2026-07-22 15:09:10 +02:00
oysteikt
1c4e8e7662
base/postfix: remove, base:nullmailer: init
Eval nix flake / evals (pull_request) Successful in 7m30s
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 9m11s
2026-07-22 21:12:00 +09:00
oysteikt
207bd1975e
kommode/gitea: add robots.txt
Eval nix flake / evals (pull_request) Successful in 7m9s
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 6m34s
2026-07-22 21:02:22 +09:00
oysteikt
28794691bf
bicep/{postgres,mysql}: bindmount data storage with noatime
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m32s
2026-07-22 13:01:02 +02:00
oysteikt
1ff34d7aab
secrets: add passwords for gatus dbms checkers
Eval nix flake / evals (pull_request) Successful in 8m9s
Build topology graph / evals (push) Successful in 2m13s
Eval nix flake / evals (push) Successful in 6m56s
2026-07-21 18:44:51 +09:00
oysteikt
3d551fab52
ildkule/gatus: add healthcheck for mariadb
2026-07-21 18:44:51 +09:00
oysteikt
a99a83c0d8
ildkule/gatus: add healthcheck for postgresql
2026-07-21 18:44:50 +09:00
oysteikt
9a837d210d
bicep/postgres: log connections/disconnections
Build topology graph / evals (push) Successful in 3m23s
Eval nix flake / evals (push) Successful in 8m59s
2026-07-21 16:39:25 +09:00
oysteikt
d3c9fabbc2
base/irqbalance: only start on multi-socket machines
2026-07-21 16:38:38 +09:00
oysteikt
950b163869
bicep/postgresql: use scram-sha-256 as default password algorithm
2026-07-21 16:32:49 +09:00
oysteikt
9bd81430a4
topology: remove (now) redundant mysql service extractor
Build topology graph / evals (push) Successful in 1m59s
Eval nix flake / evals (push) Successful in 8m5s
2026-07-20 23:20:02 +09:00
oysteikt
9b38b4b8d3
flake.lock: bump
Build topology graph / evals (push) Failing after 1m14s
Eval nix flake / evals (push) Failing after 7m47s
2026-07-20 22:30:39 +09:00
oysteikt
6abc05dc4d
treewide: have rwhod ignore always logged-in users
Build topology graph / evals (push) Successful in 2m8s
Eval nix flake / evals (push) Successful in 7m19s
2026-07-20 21:51:57 +09:00
oysteikt
2e3ac911cb
skrot: split drumknotty service details into separate file
2026-07-20 21:39:16 +09:00
oysteikt
16b0d05d27
flake.lock: bump roowho2
Build topology graph / evals (push) Successful in 2m7s
Eval nix flake / evals (push) Successful in 8m42s
2026-07-20 21:34:29 +09:00
oysteikt
fe19bb9bdb
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
Build topology graph / evals (push) Successful in 3m37s
Eval nix flake / evals (pull_request) Successful in 7m40s
Eval nix flake / evals (push) Successful in 9m6s
2026-07-20 19:37:28 +09:00
oysteikt
f4f9836deb
modules/python-http-handlers: init
2026-07-20 19:37:26 +09:00
oysteikt
fb7e350ac7
flake.lock: bump dibbler
Build topology graph / evals (push) Successful in 2m9s
Eval nix flake / evals (push) Successful in 7m43s
2026-07-18 18:44:28 +09:00
oysteikt
3c3bf6b10f
modules/drumknotty: provide state directories for all services
Build topology graph / evals (push) Successful in 2m2s
Eval nix flake / evals (push) Successful in 7m28s
2026-07-18 18:42:26 +09:00
oysteikt
b0e3d90c20
ildkule/gatus/minecraft-checker: init
Eval nix flake / evals (pull_request) Successful in 6m53s
Build topology graph / evals (push) Successful in 2m54s
Eval nix flake / evals (push) Successful in 7m18s
2026-07-07 16:26:26 +09:00
oysteikt
111c3e21bd
ildkule/gatus: init
2026-07-07 16:26:06 +09:00
oysteikt
decd8b04c1
ildkule/uptime-kuma: remove
2026-07-06 05:31:50 +09:00
oysteikt
4b8be337e0
lupine5/openvpn: additional config, open firewall
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 6m50s
2026-07-06 02:37:17 +09:00
oysteikt
fcfcb07e59
lupine5: register knutsen-vpn ip
2026-07-06 02:37:16 +09:00
oysteikt
1e66049c79
lupine5/openvpn: use certs
2026-07-06 02:37:16 +09:00
oysteikt
928ddde344
sops/lupine: add CA + 2 keypairs for OpenVPN
2026-07-06 02:37:16 +09:00
oysteikt
3aa8d0b418
lupine5/openvpn: init
Eval nix flake / evals (push) Failing after 3m2s
2026-07-05 01:31:15 +09:00
oysteikt
293f28abb1
lupine5: set up bridge and tap netdevs
Eval nix flake / evals (push) Successful in 7m27s
2026-07-05 01:01:35 +09:00
oysteikt
f4b1f090e4
flake.lock: bump various
Build topology graph / evals (push) Successful in 2m44s
Eval nix flake / evals (push) Successful in 7m8s
2026-06-30 04:15:37 +09:00
oysteikt
7c684e42f0
treewide: fix rsync <-> rrsync communication
Build topology graph / evals (push) Successful in 2m25s
Eval nix flake / evals (push) Successful in 11m17s
2026-06-30 02:41:40 +09:00
oysteikt
90bfda9066
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 8m31s
2026-06-24 14:33:20 +09:00
oysteikt
522d8f18cb
flake.{nix,lock}: bump roowho2
Build topology graph / evals (push) Successful in 2m43s
Eval nix flake / evals (push) Successful in 7m0s
2026-06-24 13:38:03 +09:00
oysteikt
5e613a03fc
treewide: set relatime for most root mounts
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 6m23s
2026-06-23 01:12:16 +09:00
oysteikt
170fb2a980
bicep/synapse: fix dbname option
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 6m43s
2026-06-22 18:55:14 +09:00
oysteikt
3e627472e9
flake.{nix,lock}: bump matrix-next
2026-06-22 18:55:13 +09:00
adriangl
e05c4ed8ca
feat: add initialdeploy hashed password to root
Build topology graph / evals (push) Successful in 2m43s
Eval nix flake / evals (push) Successful in 7m7s
2026-06-21 18:24:01 +02:00
oysteikt
3fee83ec05
ildkule/loki: restrict incoming connections to pvv + ntnu
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (pull_request) Successful in 7m17s
Eval nix flake / evals (push) Successful in 8m58s
2026-06-22 01:23:16 +09:00
oysteikt
a1f02fc39d
{ildkule/loki,base/fluentbit}: send data over https
2026-06-22 01:23:16 +09:00
adriangl
6e37635aac
ildkule/loki: firewall all endpoints except push API
...
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no >
2026-06-22 01:23:14 +09:00
oysteikt
cdc3ad488b
bicep/postgres: add script for updating all collations
Build topology graph / evals (push) Successful in 2m44s
Eval nix flake / evals (push) Successful in 8m54s
2026-06-22 01:12:59 +09:00
oysteikt
aa2712005a
temmie/nfs-mounts: create by-uid bindmounts
Build topology graph / evals (push) Successful in 2m26s
Eval nix flake / evals (push) Successful in 7m19s
2026-06-17 13:43:19 +09:00
oysteikt
89921b533b
temmie/userweb: further harden log-processor
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 7m39s
2026-06-17 12:31:02 +09:00
oysteikt
75f87ffab8
temmie/userweb: run passwd sync in different unit
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 6m33s
2026-06-17 12:15:23 +09:00
oysteikt
b910cf9563
temmie/userweb: suppress erroneous access log for documentRoot
Build topology graph / evals (push) Successful in 2m46s
Eval nix flake / evals (push) Successful in 6m50s
2026-06-17 08:57:55 +09:00
oysteikt
d23adbd4c2
temmie/userweb: deny access to documentRoot
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 8m6s
2026-06-17 08:49:44 +09:00
oysteikt
48c0a4e504
temmie/userweb: fix directory denylist enforcement
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 7m46s
2026-06-17 08:23:08 +09:00
oysteikt
374d9b1bc7
flake.nix: passthru machine config, pkgs and config.system.build
...
This shortens down the path needed to build both overlayed packages and
all the other machine derivations. Here are some examples:
```
nix build .#machine.etc
nix build '.#machine.units."nginx.service".unit'
nix build .#machine.pkgs.overlayed-package
nix build .#machine.config.services.nginx.package
```
2026-06-17 08:10:17 +09:00
oysteikt
adriangl