574 Commits

Author	SHA1	Message	Date
oysteikt	e80189c6eb	temmie/userweb: stop cating passwd on startup	2026-06-13 01:41:05 +09:00
oysteikt	56a51e4c6f	temmie/userweb: mount homedirs under /amd	2026-06-13 01:39:20 +09:00
oysteikt	f54109f6f3	temmie/userweb: set handlers for php and perl scripts	2026-06-13 01:26:27 +09:00
oysteikt	b848e0f1cc	temmie/userweb: add log processor for apache	2026-06-07 06:03:18 +09:00
oysteikt	c671329b93	temmie/userweb: inject users from passwd into httpd sandbox	2026-06-07 05:28:24 +09:00
oysteikt	2d6b09cb32	bikkje: label ports in firewall port list	2026-06-06 04:08:16 +09:00
oysteikt	88892115b5	base: enable autoScrub for all btrfs machine by default	2026-06-06 04:05:26 +09:00
oysteikt	8a290d30e7	modules/drumknotty: split into several parts ... This also fixes a few issues, such as enabling `createLocalDatabase` for multiple programs, and wraps all the screen logic within a screenrc file. Some assertions were also added to avoid some easy-to-make mistakes.	2026-06-05 14:21:35 +02:00
vegardbm	009d89f959	set default settings for worblehat and dibbler	2026-06-05 14:09:06 +02:00
vegardbm	7e754ade71	drumknotty: init	2026-06-05 14:08:58 +02:00
oysteikt	966081ebfc	bicep/mysql: enable userstat	2026-06-03 15:31:27 +09:00
oysteikt	39d313579c	bicep/mysql: rotate slow query logs	2026-06-03 15:21:18 +09:00
oysteikt	3386153b8b	ildkule/prometheus/exim: make scheme explicit	2026-06-03 13:35:13 +09:00
oysteikt	56906241f6	bekkalokk/roundcube: temporary fix for webmail redirects	2026-06-01 03:52:09 +09:00
oysteikt	3fe71d21f6	bekkalokk/roundcube: webdir moved to public_html within package	2026-06-01 02:57:43 +09:00
oysteikt	1ce3372683	lupine/binfmt: enable	2026-06-01 01:00:50 +09:00
adriangl	5f14c15679	feat: add radicale to bekkalokk	2026-06-01 00:59:54 +09:00
oysteikt	64843087be	kommode/gitea: only allow webhooks to external hosts ... We don't have any servers with intranet IPs, and we want webhooks that hook back to kommode to pass through its firewall.	2026-05-29 12:58:26 +09:00
oysteikt	0c45345050	bicep/matrix-ooye harden	2026-05-28 16:07:36 +09:00
oysteikt	788f23bf04	bicep/matrix-hookshot: harden	2026-05-28 15:58:04 +09:00
oysteikt	8416014aeb	bicep/mjolnir: harden	2026-05-28 15:58:04 +09:00
oysteikt	5bf0de1d0d	bekkalokk/website/fetch-gallery: use proper shellscript builder	2026-05-28 03:58:08 +09:00
oysteikt	a550bbf1e0	bekkalokk/roundcube: use specialized builder for nginx root dir	2026-05-28 03:46:59 +09:00
oysteikt	6d9bd8256f	kommode/gitea/install-customization: disable networking	2026-05-28 03:15:47 +09:00
oysteikt	5c859d9809	kommode/gitea/install-customization: remove ExecStart bash wrapper	2026-05-28 03:15:06 +09:00
oysteikt	dfbed75cd9	kommode/gitea/gpg: remove ExecStart bash wrapper	2026-05-28 03:06:07 +09:00
oysteikt	6237a0a0e7	bicep/minecraft-heatmap: remove ExecStartPre bash wrapper	2026-05-28 03:03:38 +09:00
oysteikt	bd2263a0a9	kommode/gitea/import-users: remove ExecStartPre bash wrapper	2026-05-28 03:02:59 +09:00
oysteikt	532e8b0eee	bekkalokk/mediawiki: install PdfHandler extension	2026-05-28 01:22:13 +09:00
oysteikt	eef3f8fe8b	bekkalokk/mediawiki: cleanup executable path config	2026-05-28 01:22:13 +09:00
oysteikt	b0f81c9379	lupine/smartd: reenable	2026-05-27 23:41:54 +09:00
oysteikt	2c819776f8	treewide/nginx: enable kTLS for a bunch more virtualHosts	2026-05-27 23:36:18 +09:00
oysteikt	2b4817b75a	ildkule/scrutiny: init	2026-05-27 23:33:45 +09:00
oysteikt	47a744f68f	ildkule/uptime-kuma: set up rsync pull target for principal	2026-05-26 13:37:29 +09:00
vegardbm	da505d4fe2	kommode: sign merge commits and sign crud actions	2026-05-25 20:21:23 +02:00
oysteikt	18ab1ef982	temmie/userweb: set -i and -t in sendmail wrapper	2026-05-25 18:49:57 +09:00
oysteikt	5023edeb13	temmie/userweb: install mod_perl with custom env	2026-05-25 18:24:23 +09:00
oysteikt	0d8c26c548	temmie/userweb: send propagatedBuildInputs through perl env wrapper	2026-05-25 17:05:02 +09:00
oysteikt	bd244e7797	temmie/userweb: add www2 server alias	2026-05-25 16:24:35 +09:00
oysteikt	e9220bb31e	temmie/userweb: use www-datas UID + GID for backwards compat	2026-05-25 15:25:26 +09:00
oysteikt	6beb9c62c3	temmie/userweb: use bro to proxy sendmail requests out of sandbox	2026-05-25 15:02:40 +09:00
vegardbm	0319858cad	Merge branch 'gluttony-bluemap'	2026-05-25 03:32:15 +02:00
vegardbm	efd50868e0	bekkalokk: add back config added through bluemap module	2026-05-25 03:28:49 +02:00
vegardbm	7a23cf7f25	bekkalokk: remove bluemap	2026-05-25 03:28:30 +02:00
vegardbm	57963fadd7	gluttony: add private key and set public key for bekkalokk	2026-05-25 03:22:13 +02:00
vegardbm	792f111a5d	bekkalokk: pull rendered map from gluttony	2026-05-25 03:22:13 +02:00
vegardbm	b27859c0fa	gluttony: export rendered bluemap to bekkalokk	2026-05-25 03:22:09 +02:00
vegardbm	c59c00f3fc	gluttony: setup bluemap	2026-05-25 03:20:21 +02:00
danio	09163b77da	Revert "bicep/matrix/livekit: open the rtc ports" ... This reverts commit 4a67eddf52.	2026-05-23 23:23:41 +02:00
vegardbm	6cca1db3b3	bekkalokk: fix permissions for mediawiki secrets	2026-05-22 20:21:24 +02:00