Commit Graph

113 Commits

Author SHA1 Message Date
2a388e29a5
tsuki/mautrix-facebook: remove 2024-06-09 16:13:31 +02:00
2b0968283d
tsuki/gitea: remove 2024-06-09 16:13:31 +02:00
a20bb288aa
tsuki/jupyter: remove 2024-06-09 15:40:57 +02:00
3b736e4c61
tsuki/pgadmin: remove 2024-06-09 15:34:09 +02:00
358a668aa7
tsuki/hydra: remove 2024-06-09 15:30:17 +02:00
37a43a2bd9
tsuki/gitea-runners: init 2024-06-09 15:25:47 +02:00
dd800a3794
tsuki/nhk-scraper: WIP changes 2024-01-23 05:51:37 +01:00
9f2e7f7ac1
tsuki/nginx: remove proxmox vhost 2024-01-23 05:49:17 +01:00
df5f0dc9c4
tsuki/matrix: use postgres through socket 2024-01-23 05:46:24 +01:00
4f020f4cdd
tsuki/matrix: downscale workers 2024-01-23 05:46:06 +01:00
b8daea8fc1
tsuki/headscale: conditional config 2024-01-23 05:40:52 +01:00
4d2875d168
tsuki/hedgedoc: use upstream module 2024-01-23 05:40:19 +01:00
22f5345026
tsuki/hydra: harden server unit 2024-01-23 05:36:39 +01:00
ce5c3666b9
tsuki/jupyter: set up tmpdirs for notebooks 2024-01-23 05:35:58 +01:00
8ce9100913
kanidm: explicitly bind to localhost 2024-01-23 05:32:34 +01:00
d629eedaaf
tsuki/navidrome: conditional config 2024-01-23 05:31:26 +01:00
72e7626e9d
tsuki/postgres: tune for bare metal setup 2024-01-23 05:31:06 +01:00
f49d3665fc
tsuki/vaultwarden: disable invitations 2024-01-23 05:30:14 +01:00
fe50d92f8c
tsuki/vaultwarden: conditional config 2024-01-23 05:29:57 +01:00
3d2825d1ec
tsuki/samba: init 2024-01-23 05:29:17 +01:00
1efd3d4f0a
tsuki/kanidm: set up backups 2024-01-23 05:27:43 +01:00
851d0c1fd0
tsuki/prometehus: set up slice for exporters 2024-01-23 05:26:22 +01:00
0d3e805611
tsuki: move to bare metal, set up zfs 2024-01-23 05:24:47 +01:00
3a52ba8901
treewide: update to nixos 23.11 2023-12-18 20:59:48 +01:00
7193a12ac2
tsuki/services: remove some uses of secret ports 2023-10-06 18:27:21 +02:00
3d613d1ac9
tsuki/invidious: use socket activation 2023-10-06 18:27:19 +02:00
424fea0dc8
tsuki/jupyter: use socket activation 2023-10-06 18:27:18 +02:00
5bb10df9e1
tsuki/borg: partial systemd hardening
There's still quite a bit to do, but the service fails on a weird option
that I've not been able to pin down. At least this is better than
nothing ¯\_(ツ)_/¯
2023-10-06 18:27:17 +02:00
450d26cf4b
tsuki/atuin: use socket activation 2023-10-06 18:27:16 +02:00
aca2962eec
tsuki/vaultwarden: use socket activation 2023-10-06 18:27:15 +02:00
caedfe1810
tsuki/matrix/stickers: use new module and add lots of stickerpacks 2023-10-06 18:27:14 +02:00
6663a8f280
tsuki/atuin: systemd harden 2023-07-28 22:25:50 +02:00
5f7eb0c8a5
tsuki/prometheus: add exporters for hedgedoc and gitea 2023-07-28 22:09:43 +02:00
d74ed2d045
tsuki/grafana: enable oauth2, misc hardening 2023-07-28 22:05:23 +02:00
816a46603a
tsuki/vaultwarden: systemd harden 2023-07-28 22:05:22 +02:00
b5874e2bcd
tsuki/navidrome: init 2023-07-28 22:05:22 +02:00
c2026eefeb
tsuki/nginx: small refactor 2023-07-28 22:05:22 +02:00
c98a1a0541
tsuki/jupyter: harden security with sops and systemd 2023-07-28 22:00:07 +02:00
1f5832074b
tsuki/taskserver: (unfinished) start setting up taskserver and taskwarrior 2023-07-12 23:42:07 +02:00
6c2bd3f2d5
tsuki/invidious: remove redundant code, add comments 2023-07-12 23:38:41 +02:00
394a932988
tsuki/nginx: misc:
- Move temporary website into its own file
- Collect all http uris into upstreams
- Convert some upstreams to UNIX sockets, as changed in the last few
  commits
2023-07-12 23:36:57 +02:00
24a02d386c
tsuki/hedgedoc: misc:
- Experiment with reducing the number of options in the module
- Use UNIX socket behind nginx
- "Upstream" systemd hardening to module
2023-07-12 23:34:23 +02:00
5ea58f1b98
tsuki/gitea: use UNIX socket behind gitea 2023-07-12 23:30:39 +02:00
fd052eea5a
tsuki/grafana: use UNIX socket behind nginx 2023-07-12 23:27:10 +02:00
1f3b5addd3
tsuki/hedgedoc: misc:
- configure oauth2 (this requires a custom module for now,
    will be resolved in 23.11)
- harden systemd service
- add systemd requires list
- use socket postgres uri
2023-07-12 02:30:00 +02:00
cf42debf37
tsuki/invidious: misc:
- bind to 127.0.0.1
- depend on postgresql systemd unit
2023-07-12 02:06:41 +02:00
c8db83b925
tsuki/plex: harden systemd unit 2023-07-12 02:06:41 +02:00
20de3c260f
tsuki/postgres: misc:
- add postgresql backup service
- harden systemd unit
- increase max_connections
2023-07-12 02:06:40 +02:00
82ea6e9f5a
tsuki: add timed nhk easy news scraper 2023-07-12 02:06:40 +02:00
dddc92877c
tsuki/matrix/matrix-appservice-irc: enable lainchan irc bouncer 2023-07-12 02:06:40 +02:00