jonmro/pvv-nixos-config
1
0
Fork 0
forked from Drift/pvv-nixos-config
Code Pull Requests Activity
1,148 Commits 17 Branches 0 Tags
d13df223bf2edfd8fbdd04413bde0368059cc770
Commit Graph

1148 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
oysteikt d13df223bf bicep/mysql: add timed jobs for analyze and optimize 2026-07-22 15:09:10 +02:00
oysteikt 1c4e8e7662 base/postfix: remove, base:nullmailer: init 2026-07-22 21:12:00 +09:00
oysteikt 207bd1975e kommode/gitea: add robots.txt 2026-07-22 21:02:22 +09:00
oysteikt 28794691bf bicep/{postgres,mysql}: bindmount data storage with noatime 2026-07-22 13:01:02 +02:00
oysteikt 1ff34d7aab secrets: add passwords for gatus dbms checkers 2026-07-21 18:44:51 +09:00
oysteikt 3d551fab52 ildkule/gatus: add healthcheck for mariadb 2026-07-21 18:44:51 +09:00
oysteikt a99a83c0d8 ildkule/gatus: add healthcheck for postgresql 2026-07-21 18:44:50 +09:00
oysteikt 9a837d210d bicep/postgres: log connections/disconnections 2026-07-21 16:39:25 +09:00
oysteikt d3c9fabbc2 base/irqbalance: only start on multi-socket machines 2026-07-21 16:38:38 +09:00
oysteikt 950b163869 bicep/postgresql: use scram-sha-256 as default password algorithm 2026-07-21 16:32:49 +09:00
oysteikt 9bd81430a4 topology: remove (now) redundant mysql service extractor 2026-07-20 23:20:02 +09:00
oysteikt 9b38b4b8d3 flake.lock: bump 2026-07-20 22:30:39 +09:00
oysteikt 6abc05dc4d treewide: have rwhod ignore always logged-in users 2026-07-20 21:51:57 +09:00
oysteikt 2e3ac911cb skrot: split drumknotty service details into separate file 2026-07-20 21:39:16 +09:00
oysteikt 16b0d05d27 flake.lock: bump roowho2 2026-07-20 21:34:29 +09:00
oysteikt fe19bb9bdb ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module 2026-07-20 19:37:28 +09:00
oysteikt f4f9836deb modules/python-http-handlers: init 2026-07-20 19:37:26 +09:00
oysteikt fb7e350ac7 flake.lock: bump dibbler 2026-07-18 18:44:28 +09:00
oysteikt 3c3bf6b10f modules/drumknotty: provide state directories for all services 2026-07-18 18:42:26 +09:00
oysteikt b0e3d90c20 ildkule/gatus/minecraft-checker: init 2026-07-07 16:26:26 +09:00
oysteikt 111c3e21bd ildkule/gatus: init 2026-07-07 16:26:06 +09:00
oysteikt decd8b04c1 ildkule/uptime-kuma: remove 2026-07-06 05:31:50 +09:00
oysteikt 4b8be337e0 lupine5/openvpn: additional config, open firewall 2026-07-06 02:37:17 +09:00
oysteikt fcfcb07e59 lupine5: register knutsen-vpn ip 2026-07-06 02:37:16 +09:00
oysteikt 1e66049c79 lupine5/openvpn: use certs 2026-07-06 02:37:16 +09:00
oysteikt 928ddde344 sops/lupine: add CA + 2 keypairs for OpenVPN 2026-07-06 02:37:16 +09:00
oysteikt 3aa8d0b418 lupine5/openvpn: init 2026-07-05 01:31:15 +09:00
oysteikt 293f28abb1 lupine5: set up bridge and tap netdevs 2026-07-05 01:01:35 +09:00
oysteikt f4b1f090e4 flake.lock: bump various 2026-06-30 04:15:37 +09:00
oysteikt 7c684e42f0 treewide: fix rsync <-> rrsync communication 2026-06-30 02:41:40 +09:00
oysteikt 90bfda9066 kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB 2026-06-24 14:33:20 +09:00
oysteikt 522d8f18cb flake.{nix,lock}: bump roowho2 2026-06-24 13:38:03 +09:00
oysteikt 5e613a03fc treewide: set relatime for most root mounts 2026-06-23 01:12:16 +09:00
oysteikt 170fb2a980 bicep/synapse: fix dbname option 2026-06-22 18:55:14 +09:00
oysteikt 3e627472e9 flake.{nix,lock}: bump matrix-next 2026-06-22 18:55:13 +09:00
adriangl e05c4ed8ca feat: add initialdeploy hashed password to root 2026-06-21 18:24:01 +02:00
oysteikt 3fee83ec05 ildkule/loki: restrict incoming connections to pvv + ntnu 2026-06-22 01:23:16 +09:00
oysteikt a1f02fc39d {ildkule/loki,base/fluentbit}: send data over https 2026-06-22 01:23:16 +09:00
adriangl 6e37635aac ildkule/loki: firewall all endpoints except push API 
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2026-06-22 01:23:14 +09:00
oysteikt cdc3ad488b bicep/postgres: add script for updating all collations 2026-06-22 01:12:59 +09:00
oysteikt aa2712005a temmie/nfs-mounts: create by-uid bindmounts 2026-06-17 13:43:19 +09:00
oysteikt 89921b533b temmie/userweb: further harden log-processor 2026-06-17 12:31:02 +09:00
oysteikt 75f87ffab8 temmie/userweb: run passwd sync in different unit 2026-06-17 12:15:23 +09:00
oysteikt b910cf9563 temmie/userweb: suppress erroneous access log for documentRoot 2026-06-17 08:57:55 +09:00
oysteikt d23adbd4c2 temmie/userweb: deny access to documentRoot 2026-06-17 08:49:44 +09:00
oysteikt 48c0a4e504 temmie/userweb: fix directory denylist enforcement 2026-06-17 08:23:08 +09:00
oysteikt 374d9b1bc7 flake.nix: passthru machine config, pkgs and config.system.build 
This shortens down the path needed to build both overlayed packages and
all the other machine derivations. Here are some examples:

```
nix build .#machine.etc
nix build '.#machine.units."nginx.service".unit'
nix build .#machine.pkgs.overlayed-package
nix build .#machine.config.services.nginx.package
```
 2026-06-17 08:10:17 +09:00
oysteikt d84cc73819 temmie/userweb: handle more .php\d suffixes 2026-06-16 19:07:58 +09:00
oysteikt b738f08c09 temmie/userweb: render path denylist into Directory/Files directives 2026-06-16 19:07:57 +09:00
oysteikt 8252bba3ad temmie/userweb: enable httpd trace on debugMode 2026-06-16 19:07:57 +09:00