felixalb
f6a84fe70e
drolsum: unalive
Build topology graph / evals (push) Successful in 2m4s
Eval nix flake / evals (push) Successful in 12m13s
2026-08-03 10:29:28 +02:00
danio
e2567e78cf
mitigations: patch matrix-synapse
Build topology graph / evals (push) Successful in 2m7s
Eval nix flake / evals (push) Successful in 12m33s
2026-07-28 17:36:31 +02:00
oysteikt
6ed3f1d269
flake.lock: bump roowho2
Build topology graph / evals (push) Successful in 2m4s
Eval nix flake / evals (push) Successful in 10m28s
2026-07-28 06:45:28 +09:00
oysteikt
afc6b3182e
ildkule/prometheus/phpfpm: scrape from bekkalokk
Build topology graph / evals (push) Successful in 1m58s
Eval nix flake / evals (push) Successful in 6m41s
2026-07-27 13:58:47 +02:00
oysteikt
7ebf1130a9
bekkalokk/prometheus-phpfpm-exporter: init
2026-07-27 13:58:47 +02:00
oysteikt
f9d39adf53
base/journald-upload: verify server cert against CA bundle
Build topology graph / evals (push) Successful in 3m13s
Eval nix flake / evals (push) Successful in 7m15s
2026-07-27 13:50:39 +02:00
oysteikt
65705237ab
modules/python-http-handlers: better daemon handling
...
Build topology graph / evals (push) Successful in 2m10s
Eval nix flake / evals (push) Successful in 6m54s
This commit extends the python http handler template with the following
things:
- Integration with systemd notify
- Named systemd sockets, to avoid depending on expected FD number
- Graceful and customizable handling of SIGHUP reloads
- Graceful shutdown on SIGTERM with timeout
- Multithreaded HTTP server, one thread per request
- Better error message on undefined handler
2026-07-27 13:50:19 +02:00
oysteikt
ab518714a5
bekkalokk/well-known: advertise TLS SMTP in autoconfig/mail
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 7m14s
2026-07-25 23:24:57 +02:00
oysteikt
4f6c731d25
flake.lock: bump pvv-nettsiden
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 7m7s
2026-07-25 20:51:24 +09:00
oysteikt
ee718563c8
bicep/postgresql: don't open udp 5432 in firewall
Build topology graph / evals (push) Successful in 2m12s
Eval nix flake / evals (push) Successful in 6m43s
2026-07-25 07:35:42 +09:00
oysteikt
fcc06d47c2
base/sshd: accept some useful envvars
Build topology graph / evals (push) Successful in 2m13s
Eval nix flake / evals (push) Successful in 7m58s
2026-07-24 16:03:54 +09:00
oysteikt
d13df223bf
bicep/mysql: add timed jobs for analyze and optimize
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m51s
2026-07-22 15:09:10 +02:00
oysteikt
1c4e8e7662
base/postfix: remove, base:nullmailer: init
Eval nix flake / evals (pull_request) Successful in 7m30s
Build topology graph / evals (push) Successful in 2m14s
Eval nix flake / evals (push) Successful in 9m11s
2026-07-22 21:12:00 +09:00
oysteikt
207bd1975e
kommode/gitea: add robots.txt
Eval nix flake / evals (pull_request) Successful in 7m9s
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 6m34s
2026-07-22 21:02:22 +09:00
oysteikt
28794691bf
bicep/{postgres,mysql}: bindmount data storage with noatime
Build topology graph / evals (push) Successful in 1m57s
Eval nix flake / evals (push) Successful in 8m32s
2026-07-22 13:01:02 +02:00
oysteikt
1ff34d7aab
secrets: add passwords for gatus dbms checkers
Eval nix flake / evals (pull_request) Successful in 8m9s
Build topology graph / evals (push) Successful in 2m13s
Eval nix flake / evals (push) Successful in 6m56s
2026-07-21 18:44:51 +09:00
oysteikt
3d551fab52
ildkule/gatus: add healthcheck for mariadb
2026-07-21 18:44:51 +09:00
oysteikt
a99a83c0d8
ildkule/gatus: add healthcheck for postgresql
2026-07-21 18:44:50 +09:00
oysteikt
9a837d210d
bicep/postgres: log connections/disconnections
Build topology graph / evals (push) Successful in 3m23s
Eval nix flake / evals (push) Successful in 8m59s
2026-07-21 16:39:25 +09:00
oysteikt
d3c9fabbc2
base/irqbalance: only start on multi-socket machines
2026-07-21 16:38:38 +09:00
oysteikt
950b163869
bicep/postgresql: use scram-sha-256 as default password algorithm
2026-07-21 16:32:49 +09:00
oysteikt
9bd81430a4
topology: remove (now) redundant mysql service extractor
Build topology graph / evals (push) Successful in 1m59s
Eval nix flake / evals (push) Successful in 8m5s
2026-07-20 23:20:02 +09:00
oysteikt
9b38b4b8d3
flake.lock: bump
Build topology graph / evals (push) Failing after 1m14s
Eval nix flake / evals (push) Failing after 7m47s
2026-07-20 22:30:39 +09:00
oysteikt
6abc05dc4d
treewide: have rwhod ignore always logged-in users
Build topology graph / evals (push) Successful in 2m8s
Eval nix flake / evals (push) Successful in 7m19s
2026-07-20 21:51:57 +09:00
oysteikt
2e3ac911cb
skrot: split drumknotty service details into separate file
2026-07-20 21:39:16 +09:00
oysteikt
16b0d05d27
flake.lock: bump roowho2
Build topology graph / evals (push) Successful in 2m7s
Eval nix flake / evals (push) Successful in 8m42s
2026-07-20 21:34:29 +09:00
oysteikt
fe19bb9bdb
ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module
Build topology graph / evals (push) Successful in 3m37s
Eval nix flake / evals (pull_request) Successful in 7m40s
Eval nix flake / evals (push) Successful in 9m6s
2026-07-20 19:37:28 +09:00
oysteikt
f4f9836deb
modules/python-http-handlers: init
2026-07-20 19:37:26 +09:00
oysteikt
fb7e350ac7
flake.lock: bump dibbler
Build topology graph / evals (push) Successful in 2m9s
Eval nix flake / evals (push) Successful in 7m43s
2026-07-18 18:44:28 +09:00
oysteikt
3c3bf6b10f
modules/drumknotty: provide state directories for all services
Build topology graph / evals (push) Successful in 2m2s
Eval nix flake / evals (push) Successful in 7m28s
2026-07-18 18:42:26 +09:00
oysteikt
b0e3d90c20
ildkule/gatus/minecraft-checker: init
Eval nix flake / evals (pull_request) Successful in 6m53s
Build topology graph / evals (push) Successful in 2m54s
Eval nix flake / evals (push) Successful in 7m18s
2026-07-07 16:26:26 +09:00
oysteikt
111c3e21bd
ildkule/gatus: init
2026-07-07 16:26:06 +09:00
oysteikt
decd8b04c1
ildkule/uptime-kuma: remove
2026-07-06 05:31:50 +09:00
oysteikt
4b8be337e0
lupine5/openvpn: additional config, open firewall
Build topology graph / evals (push) Successful in 2m24s
Eval nix flake / evals (push) Successful in 6m50s
2026-07-06 02:37:17 +09:00
oysteikt
fcfcb07e59
lupine5: register knutsen-vpn ip
2026-07-06 02:37:16 +09:00
oysteikt
1e66049c79
lupine5/openvpn: use certs
2026-07-06 02:37:16 +09:00
oysteikt
928ddde344
sops/lupine: add CA + 2 keypairs for OpenVPN
2026-07-06 02:37:16 +09:00
oysteikt
3aa8d0b418
lupine5/openvpn: init
Eval nix flake / evals (push) Failing after 3m2s
2026-07-05 01:31:15 +09:00
oysteikt
293f28abb1
lupine5: set up bridge and tap netdevs
Eval nix flake / evals (push) Successful in 7m27s
2026-07-05 01:01:35 +09:00
oysteikt
f4b1f090e4
flake.lock: bump various
Build topology graph / evals (push) Successful in 2m44s
Eval nix flake / evals (push) Successful in 7m8s
2026-06-30 04:15:37 +09:00
oysteikt
7c684e42f0
treewide: fix rsync <-> rrsync communication
Build topology graph / evals (push) Successful in 2m25s
Eval nix flake / evals (push) Successful in 11m17s
2026-06-30 02:41:40 +09:00
oysteikt
90bfda9066
kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB
Build topology graph / evals (push) Successful in 3m46s
Eval nix flake / evals (push) Successful in 8m31s
2026-06-24 14:33:20 +09:00
oysteikt
522d8f18cb
flake.{nix,lock}: bump roowho2
Build topology graph / evals (push) Successful in 2m43s
Eval nix flake / evals (push) Successful in 7m0s
2026-06-24 13:38:03 +09:00
oysteikt
5e613a03fc
treewide: set relatime for most root mounts
Build topology graph / evals (push) Successful in 2m27s
Eval nix flake / evals (push) Successful in 6m23s
2026-06-23 01:12:16 +09:00
oysteikt
170fb2a980
bicep/synapse: fix dbname option
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (push) Successful in 6m43s
2026-06-22 18:55:14 +09:00
oysteikt
3e627472e9
flake.{nix,lock}: bump matrix-next
2026-06-22 18:55:13 +09:00
adriangl
e05c4ed8ca
feat: add initialdeploy hashed password to root
Build topology graph / evals (push) Successful in 2m43s
Eval nix flake / evals (push) Successful in 7m7s
2026-06-21 18:24:01 +02:00
oysteikt
3fee83ec05
ildkule/loki: restrict incoming connections to pvv + ntnu
Build topology graph / evals (push) Successful in 2m21s
Eval nix flake / evals (pull_request) Successful in 7m17s
Eval nix flake / evals (push) Successful in 8m58s
2026-06-22 01:23:16 +09:00
oysteikt
a1f02fc39d
{ildkule/loki,base/fluentbit}: send data over https
2026-06-22 01:23:16 +09:00
adriangl
6e37635aac
ildkule/loki: firewall all endpoints except push API
...
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no >
2026-06-22 01:23:14 +09:00
felixalb
danio
oysteikt
adriangl