jonmro/pvv-nixos-config
1
0
Fork 0
forked from Drift/pvv-nixos-config
Code Pull Requests Activity
1,139 Commits 17 Branches 0 Tags
de1e80cd4075c8deae0d6b23628e092428bd1f12
Commit Graph

1139 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
oysteikt de1e80cd40 modules/python-http-handlers: better daemon handling 
This commit extends the python http handler template with the following
things:

- Integration with systemd notify
- Named systemd sockets, to avoid depending on expected FD number
- Graceful and customizable handling of SIGHUP reloads
- Graceful shutdown on SIGTERM with timeout
- Multithreaded HTTP server, one thread per request
- Better error message on undefined handler
 2026-07-21 23:53:10 +09:00
oysteikt 9bd81430a4 topology: remove (now) redundant mysql service extractor 2026-07-20 23:20:02 +09:00
oysteikt 9b38b4b8d3 flake.lock: bump 2026-07-20 22:30:39 +09:00
oysteikt 6abc05dc4d treewide: have rwhod ignore always logged-in users 2026-07-20 21:51:57 +09:00
oysteikt 2e3ac911cb skrot: split drumknotty service details into separate file 2026-07-20 21:39:16 +09:00
oysteikt 16b0d05d27 flake.lock: bump roowho2 2026-07-20 21:34:29 +09:00
oysteikt fe19bb9bdb ildkule/gatus/minecraft-checker: rewrite to use python-http-handlers module 2026-07-20 19:37:28 +09:00
oysteikt f4f9836deb modules/python-http-handlers: init 2026-07-20 19:37:26 +09:00
oysteikt fb7e350ac7 flake.lock: bump dibbler 2026-07-18 18:44:28 +09:00
oysteikt 3c3bf6b10f modules/drumknotty: provide state directories for all services 2026-07-18 18:42:26 +09:00
oysteikt b0e3d90c20 ildkule/gatus/minecraft-checker: init 2026-07-07 16:26:26 +09:00
oysteikt 111c3e21bd ildkule/gatus: init 2026-07-07 16:26:06 +09:00
oysteikt decd8b04c1 ildkule/uptime-kuma: remove 2026-07-06 05:31:50 +09:00
oysteikt 4b8be337e0 lupine5/openvpn: additional config, open firewall 2026-07-06 02:37:17 +09:00
oysteikt fcfcb07e59 lupine5: register knutsen-vpn ip 2026-07-06 02:37:16 +09:00
oysteikt 1e66049c79 lupine5/openvpn: use certs 2026-07-06 02:37:16 +09:00
oysteikt 928ddde344 sops/lupine: add CA + 2 keypairs for OpenVPN 2026-07-06 02:37:16 +09:00
oysteikt 3aa8d0b418 lupine5/openvpn: init 2026-07-05 01:31:15 +09:00
oysteikt 293f28abb1 lupine5: set up bridge and tap netdevs 2026-07-05 01:01:35 +09:00
oysteikt f4b1f090e4 flake.lock: bump various 2026-06-30 04:15:37 +09:00
oysteikt 7c684e42f0 treewide: fix rsync <-> rrsync communication 2026-06-30 02:41:40 +09:00
oysteikt 90bfda9066 kommode/gitea: bump AVATAR_MAX_ORIGIN_SIZE from 2MB to 4MB 2026-06-24 14:33:20 +09:00
oysteikt 522d8f18cb flake.{nix,lock}: bump roowho2 2026-06-24 13:38:03 +09:00
oysteikt 5e613a03fc treewide: set relatime for most root mounts 2026-06-23 01:12:16 +09:00
oysteikt 170fb2a980 bicep/synapse: fix dbname option 2026-06-22 18:55:14 +09:00
oysteikt 3e627472e9 flake.{nix,lock}: bump matrix-next 2026-06-22 18:55:13 +09:00
adriangl e05c4ed8ca feat: add initialdeploy hashed password to root 2026-06-21 18:24:01 +02:00
oysteikt 3fee83ec05 ildkule/loki: restrict incoming connections to pvv + ntnu 2026-06-22 01:23:16 +09:00
oysteikt a1f02fc39d {ildkule/loki,base/fluentbit}: send data over https 2026-06-22 01:23:16 +09:00
adriangl 6e37635aac ildkule/loki: firewall all endpoints except push API 
Co-authored-by: Øystein Kristoffer Tveit <oysteikt@pvv.ntnu.no>
 2026-06-22 01:23:14 +09:00
oysteikt cdc3ad488b bicep/postgres: add script for updating all collations 2026-06-22 01:12:59 +09:00
oysteikt aa2712005a temmie/nfs-mounts: create by-uid bindmounts 2026-06-17 13:43:19 +09:00
oysteikt 89921b533b temmie/userweb: further harden log-processor 2026-06-17 12:31:02 +09:00
oysteikt 75f87ffab8 temmie/userweb: run passwd sync in different unit 2026-06-17 12:15:23 +09:00
oysteikt b910cf9563 temmie/userweb: suppress erroneous access log for documentRoot 2026-06-17 08:57:55 +09:00
oysteikt d23adbd4c2 temmie/userweb: deny access to documentRoot 2026-06-17 08:49:44 +09:00
oysteikt 48c0a4e504 temmie/userweb: fix directory denylist enforcement 2026-06-17 08:23:08 +09:00
oysteikt 374d9b1bc7 flake.nix: passthru machine config, pkgs and config.system.build 
This shortens down the path needed to build both overlayed packages and
all the other machine derivations. Here are some examples:

```
nix build .#machine.etc
nix build '.#machine.units."nginx.service".unit'
nix build .#machine.pkgs.overlayed-package
nix build .#machine.config.services.nginx.package
```
 2026-06-17 08:10:17 +09:00
oysteikt d84cc73819 temmie/userweb: handle more .php\d suffixes 2026-06-16 19:07:58 +09:00
oysteikt b738f08c09 temmie/userweb: render path denylist into Directory/Files directives 2026-06-16 19:07:57 +09:00
oysteikt 8252bba3ad temmie/userweb: enable httpd trace on debugMode 2026-06-16 19:07:57 +09:00
oysteikt a776a5a5fe temmie/userweb: explicitly override mod_perl and mod_userdir 2026-06-16 19:07:57 +09:00
oysteikt ed57744ec3 temmie/userweb: add more patterns to denylist 2026-06-16 16:07:32 +09:00
oysteikt 226db1f46e temmie/userweb: add more DirectoryIndex variants 2026-06-16 16:07:32 +09:00
oysteikt 51e1656177 temmie/userweb: disable ~pvv 2026-06-16 15:53:52 +09:00
oysteikt 47d2dcf9ff temmie/userweb: add bro server to userweb slice 2026-06-16 03:37:28 +09:00
oysteikt 254b1d9b14 temmie/userweb: split into more modules 2026-06-16 03:33:28 +09:00
oysteikt 2301672a21 temmie/userweb: run log processors as separate systemd units 
This lets us divide up some of the logic making httpd itself less
brittle, and also reduces the amount of privileges for httpd.
 2026-06-16 02:56:28 +09:00
felixalb 7145abadf3 flake: update input pvv-nettsiden 2026-06-13 16:59:50 +02:00
oysteikt b533b09c8f base/various: add to slice system-monitoring 2026-06-13 04:45:39 +09:00