 oysteikt
|
ee718563c8
|
bicep/postgresql: don't open udp 5432 in firewall
Build topology graph / evals (push) Successful in 2m12s
Eval nix flake / evals (push) Successful in 6m43s
|
2026-07-25 07:35:42 +09:00 |
|
|
oysteikt
|
d13df223bf
|
bicep/mysql: add timed jobs for analyze and optimize
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m51s
|
2026-07-22 15:09:10 +02:00 |
|
|
oysteikt
|
1c4e8e7662
|
base/postfix: remove, base:nullmailer: init
Eval nix flake / evals (pull_request) Successful in 7m30s
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 9m11s
|
2026-07-22 21:12:00 +09:00 |
|
|
oysteikt
|
207bd1975e
|
kommode/gitea: add robots.txt
Eval nix flake / evals (pull_request) Successful in 7m9s
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 6m34s
|
2026-07-22 21:02:22 +09:00 |
|
|
oysteikt
|
28794691bf
|
bicep/{postgres,mysql}: bindmount data storage with noatime
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m32s
|
2026-07-22 13:01:02 +02:00 |
|
|
oysteikt
|
3d551fab52
|
ildkule/gatus: add healthcheck for mariadb
|
2026-07-21 18:44:51 +09:00 |
|
|
oysteikt
|
a99a83c0d8
|
ildkule/gatus: add healthcheck for postgresql
|
2026-07-21 18:44:50 +09:00 |
|
|
oysteikt
|
9a837d210d
|
bicep/postgres: log connections/disconnections
Build topology graph / evals (push) Successful in 3m23s
Eval nix flake / evals (push) Successful in 8m59s
|
2026-07-21 16:39:25 +09:00 |
|
|
oysteikt
|
950b163869
|
bicep/postgresql: use scram-sha-256 as default password algorithm
|
2026-07-21 16:32:49 +09:00 |
|
|
oysteikt
|
6abc05dc4d
|
treewide: have rwhod ignore always logged-in users
Build topology graph / evals (push) Successful in 2m8s
Eval nix flake / evals (push) Successful in 7m19s
|
2026-07-20 21:51:57 +09:00 |
|
|
oysteikt
|
2e3ac911cb
|
skrot: split drumknotty service details into separate file
|
2026-07-20 21:39:16 +09:00 |
|
|
oysteikt
|
fe19bb9bdb
|
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
Build topology graph / evals (push) Successful in 3m37s
Eval nix flake / evals (pull_request) Successful in 7m40s
Eval nix flake / evals (push) Successful in 9m6s
|
2026-07-20 19:37:28 +09:00 |
|
|
oysteikt
|
b0e3d90c20
|
ildkule/gatus/minecraft-checker: init
Eval nix flake / evals (pull_request) Successful in 6m53s
Build topology graph / evals (push) Successful in 2m54s
Eval nix flake / evals (push) Successful in 7m18s
|
2026-07-07 16:26:26 +09:00 |
|
|
oysteikt
|
111c3e21bd
|
ildkule/gatus: init
|
2026-07-07 16:26:06 +09:00 |
|
|
oysteikt
|
decd8b04c1
|
ildkule/uptime-kuma: remove
|
2026-07-06 05:31:50 +09:00 |
|
|
oysteikt
|
4b8be337e0
|
lupine5/openvpn: additional config, open firewall
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 6m50s
|
2026-07-06 02:37:17 +09:00 |
|
|
oysteikt
|
fcfcb07e59
|
lupine5: register knutsen-vpn ip
|
2026-07-06 02:37:16 +09:00 |
|
|
oysteikt
|
1e66049c79
|
lupine5/openvpn: use certs
|
2026-07-06 02:37:16 +09:00 |
|
|
oysteikt
|
3aa8d0b418
|
lupine5/openvpn: init
Eval nix flake / evals (push) Failing after 3m2s
|
2026-07-05 01:31:15 +09:00 |
|
|
oysteikt
|
293f28abb1
|
lupine5: set up bridge and tap netdevs
Eval nix flake / evals (push) Successful in 7m27s
|
2026-07-05 01:01:35 +09:00 |
|
|
oysteikt
|
7c684e42f0
|
treewide: fix rsync <-> rrsync communication
Build topology graph / evals (push) Successful in 2m25s
Eval nix flake / evals (push) Successful in 11m17s
|
2026-06-30 02:41:40 +09:00 |
|
|
oysteikt
|
90bfda9066
|
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 8m31s
|
2026-06-24 14:33:20 +09:00 |
|
|
oysteikt
|
5e613a03fc
|
treewide: set relatime for most root mounts
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 6m23s
|
2026-06-23 01:12:16 +09:00 |
|
|
oysteikt
|
170fb2a980
|
bicep/synapse: fix dbname option
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 6m43s
|
2026-06-22 18:55:14 +09:00 |
|
|
oysteikt
|
3fee83ec05
|
ildkule/loki: restrict incoming connections to pvv + ntnu
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (pull_request) Successful in 7m17s
Eval nix flake / evals (push) Successful in 8m58s
|
2026-06-22 01:23:16 +09:00 |
|
|
oysteikt
|
a1f02fc39d
|
{ildkule/loki,base/fluentbit}: send data over https
|
2026-06-22 01:23:16 +09:00 |
|
 adriangl
|
6e37635aac
|
ildkule/loki: firewall all endpoints except push API
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
|
2026-06-22 01:23:14 +09:00 |
|
|
oysteikt
|
cdc3ad488b
|
bicep/postgres: add script for updating all collations
Build topology graph / evals (push) Successful in 2m44s
Eval nix flake / evals (push) Successful in 8m54s
|
2026-06-22 01:12:59 +09:00 |
|
|
oysteikt
|
aa2712005a
|
temmie/nfs-mounts: create by-uid bindmounts
Build topology graph / evals (push) Successful in 2m26s
Eval nix flake / evals (push) Successful in 7m19s
|
2026-06-17 13:43:19 +09:00 |
|
|
oysteikt
|
89921b533b
|
temmie/userweb: further harden log-processor
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 7m39s
|
2026-06-17 12:31:02 +09:00 |
|
|
oysteikt
|
75f87ffab8
|
temmie/userweb: run passwd sync in different unit
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 6m33s
|
2026-06-17 12:15:23 +09:00 |
|
|
oysteikt
|
b910cf9563
|
temmie/userweb: suppress erroneous access log for documentRoot
Build topology graph / evals (push) Successful in 2m46s
Eval nix flake / evals (push) Successful in 6m50s
|
2026-06-17 08:57:55 +09:00 |
|
|
oysteikt
|
d23adbd4c2
|
temmie/userweb: deny access to documentRoot
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 8m6s
|
2026-06-17 08:49:44 +09:00 |
|
|
oysteikt
|
48c0a4e504
|
temmie/userweb: fix directory denylist enforcement
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 7m46s
|
2026-06-17 08:23:08 +09:00 |
|
|
oysteikt
|
d84cc73819
|
temmie/userweb: handle more .php\d suffixes
Build topology graph / evals (push) Successful in 3m57s
Eval nix flake / evals (push) Successful in 9m22s
|
2026-06-16 19:07:58 +09:00 |
|
|
oysteikt
|
b738f08c09
|
temmie/userweb: render path denylist into Directory/Files directives
|
2026-06-16 19:07:57 +09:00 |
|
|
oysteikt
|
8252bba3ad
|
temmie/userweb: enable httpd trace on debugMode
|
2026-06-16 19:07:57 +09:00 |
|
|
oysteikt
|
a776a5a5fe
|
temmie/userweb: explicitly override mod_perl and mod_userdir
|
2026-06-16 19:07:57 +09:00 |
|
|
oysteikt
|
ed57744ec3
|
temmie/userweb: add more patterns to denylist
Build topology graph / evals (push) Successful in 2m26s
Eval nix flake / evals (push) Successful in 8m19s
|
2026-06-16 16:07:32 +09:00 |
|
|
oysteikt
|
226db1f46e
|
temmie/userweb: add more DirectoryIndex variants
|
2026-06-16 16:07:32 +09:00 |
|
|
oysteikt
|
51e1656177
|
temmie/userweb: disable ~pvv
|
2026-06-16 15:53:52 +09:00 |
|
|
oysteikt
|
47d2dcf9ff
|
temmie/userweb: add bro server to userweb slice
Build topology graph / evals (push) Successful in 4m15s
Eval nix flake / evals (push) Successful in 6m25s
|
2026-06-16 03:37:28 +09:00 |
|
|
oysteikt
|
254b1d9b14
|
temmie/userweb: split into more modules
Build topology graph / evals (push) Successful in 2m49s
Eval nix flake / evals (push) Successful in 8m32s
|
2026-06-16 03:33:28 +09:00 |
|
|
oysteikt
|
2301672a21
|
temmie/userweb: run log processors as separate systemd units
Build topology graph / evals (push) Successful in 2m45s
Eval nix flake / evals (push) Successful in 6m45s
This lets us divide up some of the logic making httpd itself less
brittle, and also reduces the amount of privileges for httpd.
|
2026-06-16 02:56:28 +09:00 |
|
|
oysteikt
|
526b55c49a
|
{ildkule/prometheus,base}: send stats over HTTPS through nginx
Build topology graph / evals (push) Successful in 2m42s
Eval nix flake / evals (push) Successful in 6m36s
|
2026-06-13 02:54:28 +09:00 |
|
|
oysteikt
|
e80189c6eb
|
temmie/userweb: stop cating passwd on startup
Build topology graph / evals (push) Successful in 2m47s
Eval nix flake / evals (push) Successful in 9m7s
|
2026-06-13 01:41:05 +09:00 |
|
|
oysteikt
|
56a51e4c6f
|
temmie/userweb: mount homedirs under /amd
Build topology graph / evals (push) Successful in 2m25s
Eval nix flake / evals (push) Successful in 6m20s
|
2026-06-13 01:39:20 +09:00 |
|
|
oysteikt
|
f54109f6f3
|
temmie/userweb: set handlers for php and perl scripts
Build topology graph / evals (push) Successful in 4m9s
Eval nix flake / evals (push) Successful in 8m58s
|
2026-06-13 01:26:27 +09:00 |
|
|
oysteikt
|
b848e0f1cc
|
temmie/userweb: add log processor for apache
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 8m48s
|
2026-06-07 06:03:18 +09:00 |
|
|
oysteikt
|
c671329b93
|
temmie/userweb: inject users from passwd into httpd sandbox
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 8m30s
|
2026-06-07 05:28:24 +09:00 |
|