Commit Graph

103 Commits

Author SHA1 Message Date
5250d40457 grub: remove version, attr for 23.05 2023-07-12 02:06:41 +02:00
cf42debf37 tsuki/invidious: misc:
- bind to 127.0.0.1
- depend on postgresql systemd unit
2023-07-12 02:06:41 +02:00
c8db83b925 tsuki/plex: harden systemd unit 2023-07-12 02:06:41 +02:00
20de3c260f tsuki/postgres: misc:
- add postgresql backup service
- harden systemd unit
- increase max_connections
2023-07-12 02:06:40 +02:00
82ea6e9f5a tsuki: add timed nhk easy news scraper 2023-07-12 02:06:40 +02:00
dddc92877c tsuki/matrix/matrix-appservice-irc: enable lainchan irc bouncer 2023-07-12 02:06:40 +02:00
68b181fc05 tsuki/matrix/mx-puppet-discord: disable temporarily
This still uses an old version of node that is disabled
in nixpkgs 23.05, disabling for now
2023-07-12 02:06:39 +02:00
98745298c7 tsuki/matrix/mautrix-facebook: disable
Got banned one too many times, disabling for now.
2023-07-12 02:06:39 +02:00
8a42e97014 tsuki/monitoring: misc:
- Secure grafana better, it had secrets in the nix store
- Set up prometheus exporters for nginx and php-fpm
- Add urls for dashboards
- Disable automatic updates
2023-07-12 02:06:39 +02:00
25b6f0f3e9 tsuki/vaultwarden: add vaultwarden, password manager 2023-07-12 02:06:38 +02:00
40e95ce030 tsuki/borg: set up borgbackup 2023-07-12 02:06:37 +02:00
0e3a4c35d2 tsuki/atuin: set up atuin server 2023-07-12 02:06:16 +02:00
fc0e4f6c52 tsuki/nginx/www: real website dead, add temporary website 2023-07-12 02:04:57 +02:00
949f228c97 tsuki/hydra: put all services below system-hydra.slice 2023-07-12 02:04:56 +02:00
7f8d60057d tsuki/headscale: fix oauth2, and set up tailscale 2023-07-12 02:04:53 +02:00
dc14eaa086 sops: add kasei to sops 2023-05-08 02:50:47 +02:00
3267e5f687 tsuki/headscale: start working on oidc login 2023-05-08 02:36:17 +02:00
cc03b64376 common: use machinevars to determine whether to use x11 2023-05-08 02:36:15 +02:00
58061df4ab tsuki: set up nextcloud, without enabling it 2023-05-08 02:36:14 +02:00
32885239c3 tsuki/pgadmin: misc
- The pgadmin config has grown, and as a result, it has been split from
    the postgres file.
- Setup OAuth
- Setup uWSGI and forward to nginx via socket
  (This last part is still a little borked, and the service is not
  functioning entirely just yet)
2023-05-08 02:36:13 +02:00
53dbedef2b tsuki/hedgedoc: small auth url improvement 2023-05-08 02:36:12 +02:00
f8c06f985e common: update openssh setting API 2023-05-08 02:36:12 +02:00
7cdf122c58 tsuki: set up invidious 2023-05-08 02:36:10 +02:00
df3aa7c10e tsuki: setup oauth2 for pgadmin
This commit also changes the pgadmin package from `22.11` to `unstable`
2023-03-17 01:28:33 +01:00
5e2a5a939b tsuki: move gitea postgres password to sops 2023-03-08 15:59:50 +01:00
a82a3f95c0 tsuki: move hardware config to configuration file 2023-03-08 15:26:07 +01:00
7a0fcf7805 tsuki: configure wildcard certs for nginx 2023-03-08 14:54:43 +01:00
ebd854a0ae gitea: set up oauth2 2023-03-08 14:54:42 +01:00
dd6c99226e tsuki: set up hedgedoc
the dynmap subdomain was also renamed from "dyn" to "map" in this commit
2023-03-08 14:54:40 +01:00
1d99bbfd46 Set up sops-nix 2023-03-07 23:15:21 +01:00
2ad7b7b2c3 tsuki: remove keycloak 2023-03-07 23:15:20 +01:00
0df70d6c72 tsuki: add well-known autoconfig for thunderbird mail 2023-03-07 23:15:19 +01:00
d5ae85092c tsuki: set up kanidm 2023-03-07 23:15:18 +01:00
f41fcce8c6 common: add some more nix options 2023-02-26 04:36:21 +01:00
7c3c830d6e tsuki: add recommended minecraft jvm flags 2023-02-25 21:15:35 +01:00
5b0dd71b4a tsuki: add some systemd constraints
Add some systemd constraints to some fix boottime service failures
2023-02-25 21:12:38 +01:00
a08f6ce28e tsuki: add .well-known/matrix/client 2023-02-25 21:10:39 +01:00
1eefc118bf tsuki: add postgres to environment 2023-02-25 20:01:57 +01:00
7f416ed5b8 common.nix: fix weird headless-var recursion issue 2023-02-25 18:05:57 +01:00
42938295ac kasei: misc changes
- new screen setup
- new network setup
- don't explicitly enable xserver and lightdm
- add nvidia video drivers to x11
2023-02-25 18:04:55 +01:00
7ee4535963 kasei: enable docker and libvirtd 2023-02-25 18:01:22 +01:00
c215f945e9 kasei: move hardware-configuration to main config 2023-02-25 18:01:06 +01:00
6b037127e2 kasei: add temporary logid service 2023-02-25 18:00:02 +01:00
45497aea2b tsuki: set up proper grafana infrastructure
- Set up a bunch of exporters
- Download matching dashboard declarations
- Remove influxdb
2023-01-20 19:55:52 +01:00
b772e3eca3 use resolved globally 2023-01-20 19:53:08 +01:00
e840a95ebe tsuki: use matrix-synapse-next module with workers 2023-01-20 19:52:04 +01:00
47d8aa7899 tsuki: add headscale 2023-01-16 17:16:42 +01:00
b5030a7c06 tsuki: move grafana config into nondeprecated attrset 2023-01-16 17:16:40 +01:00
3820be9ef9 tsuki: update matrix stickers 2023-01-16 17:16:39 +01:00
ef4f5d4dd4 tsuki: reduce amount of gitea backups, and move state dir 2023-01-16 16:11:28 +01:00