618 Commits

Author	SHA1	Message	Date
oysteikt	d13df223bf	bicep/mysql: add timed jobs for analyze and optimize	2026-07-22 15:09:10 +02:00
oysteikt	1c4e8e7662	base/postfix: remove, base:nullmailer: init	2026-07-22 21:12:00 +09:00
oysteikt	207bd1975e	kommode/gitea: add robots.txt	2026-07-22 21:02:22 +09:00
oysteikt	28794691bf	bicep/{postgres,mysql}: bindmount data storage with noatime	2026-07-22 13:01:02 +02:00
oysteikt	3d551fab52	ildkule/gatus: add healthcheck for mariadb	2026-07-21 18:44:51 +09:00
oysteikt	a99a83c0d8	ildkule/gatus: add healthcheck for postgresql	2026-07-21 18:44:50 +09:00
oysteikt	9a837d210d	bicep/postgres: log connections/disconnections	2026-07-21 16:39:25 +09:00
oysteikt	950b163869	bicep/postgresql: use scram-sha-256 as default password algorithm	2026-07-21 16:32:49 +09:00
oysteikt	6abc05dc4d	treewide: have rwhod ignore always logged-in users	2026-07-20 21:51:57 +09:00
oysteikt	2e3ac911cb	skrot: split drumknotty service details into separate file	2026-07-20 21:39:16 +09:00
oysteikt	fe19bb9bdb	ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module	2026-07-20 19:37:28 +09:00
oysteikt	b0e3d90c20	ildkule/gatus/minecraft-checker: init	2026-07-07 16:26:26 +09:00
oysteikt	111c3e21bd	ildkule/gatus: init	2026-07-07 16:26:06 +09:00
oysteikt	decd8b04c1	ildkule/uptime-kuma: remove	2026-07-06 05:31:50 +09:00
oysteikt	4b8be337e0	lupine5/openvpn: additional config, open firewall	2026-07-06 02:37:17 +09:00
oysteikt	fcfcb07e59	lupine5: register knutsen-vpn ip	2026-07-06 02:37:16 +09:00
oysteikt	1e66049c79	lupine5/openvpn: use certs	2026-07-06 02:37:16 +09:00
oysteikt	3aa8d0b418	lupine5/openvpn: init	2026-07-05 01:31:15 +09:00
oysteikt	293f28abb1	lupine5: set up bridge and tap netdevs	2026-07-05 01:01:35 +09:00
oysteikt	7c684e42f0	treewide: fix rsync <-> rrsync communication	2026-06-30 02:41:40 +09:00
oysteikt	90bfda9066	kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB	2026-06-24 14:33:20 +09:00
oysteikt	5e613a03fc	treewide: set relatime for most root mounts	2026-06-23 01:12:16 +09:00
oysteikt	170fb2a980	bicep/synapse: fix dbname option	2026-06-22 18:55:14 +09:00
oysteikt	3fee83ec05	ildkule/loki: restrict incoming connections to pvv + ntnu	2026-06-22 01:23:16 +09:00
oysteikt	a1f02fc39d	{ildkule/loki,base/fluentbit}: send data over https	2026-06-22 01:23:16 +09:00
adriangl	6e37635aac	ildkule/loki: firewall all endpoints except push API ... Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>	2026-06-22 01:23:14 +09:00
oysteikt	cdc3ad488b	bicep/postgres: add script for updating all collations	2026-06-22 01:12:59 +09:00
oysteikt	aa2712005a	temmie/nfs-mounts: create by-uid bindmounts	2026-06-17 13:43:19 +09:00
oysteikt	89921b533b	temmie/userweb: further harden log-processor	2026-06-17 12:31:02 +09:00
oysteikt	75f87ffab8	temmie/userweb: run passwd sync in different unit	2026-06-17 12:15:23 +09:00
oysteikt	b910cf9563	temmie/userweb: suppress erroneous access log for documentRoot	2026-06-17 08:57:55 +09:00
oysteikt	d23adbd4c2	temmie/userweb: deny access to documentRoot	2026-06-17 08:49:44 +09:00
oysteikt	48c0a4e504	temmie/userweb: fix directory denylist enforcement	2026-06-17 08:23:08 +09:00
oysteikt	d84cc73819	temmie/userweb: handle more .php\d suffixes	2026-06-16 19:07:58 +09:00
oysteikt	b738f08c09	temmie/userweb: render path denylist into Directory/Files directives	2026-06-16 19:07:57 +09:00
oysteikt	8252bba3ad	temmie/userweb: enable httpd trace on debugMode	2026-06-16 19:07:57 +09:00
oysteikt	a776a5a5fe	temmie/userweb: explicitly override mod_perl and mod_userdir	2026-06-16 19:07:57 +09:00
oysteikt	ed57744ec3	temmie/userweb: add more patterns to denylist	2026-06-16 16:07:32 +09:00
oysteikt	226db1f46e	temmie/userweb: add more DirectoryIndex variants	2026-06-16 16:07:32 +09:00
oysteikt	51e1656177	temmie/userweb: disable ~pvv	2026-06-16 15:53:52 +09:00
oysteikt	47d2dcf9ff	temmie/userweb: add bro server to userweb slice	2026-06-16 03:37:28 +09:00
oysteikt	254b1d9b14	temmie/userweb: split into more modules	2026-06-16 03:33:28 +09:00
oysteikt	2301672a21	temmie/userweb: run log processors as separate systemd units ... This lets us divide up some of the logic making httpd itself less brittle, and also reduces the amount of privileges for httpd.	2026-06-16 02:56:28 +09:00
oysteikt	526b55c49a	{ildkule/prometheus,base}: send stats over HTTPS through nginx	2026-06-13 02:54:28 +09:00
oysteikt	e80189c6eb	temmie/userweb: stop cating passwd on startup	2026-06-13 01:41:05 +09:00
oysteikt	56a51e4c6f	temmie/userweb: mount homedirs under /amd	2026-06-13 01:39:20 +09:00
oysteikt	f54109f6f3	temmie/userweb: set handlers for php and perl scripts	2026-06-13 01:26:27 +09:00
oysteikt	b848e0f1cc	temmie/userweb: add log processor for apache	2026-06-07 06:03:18 +09:00
oysteikt	c671329b93	temmie/userweb: inject users from passwd into httpd sandbox	2026-06-07 05:28:24 +09:00
oysteikt	2d6b09cb32	bikkje: label ports in firewall port list	2026-06-06 04:08:16 +09:00