255 Commits

Author	SHA1	Message	Date
h7x4	a971075a58	tsuki/nextcloud: drop	2024-07-08 15:45:58 +02:00
h7x4	336ab042dd	tsuki: remove unused cron backup services	2024-07-08 15:45:08 +02:00
h7x4	2532fef033	secrets: split home and common secrets	2024-07-08 15:02:54 +02:00
h7x4	49eec1ed0d	treewide: bump home.stateVersion	2024-06-30 15:19:20 +02:00
h7x4	83afd674a7	home: move home.stateVersion to machine specific config	2024-06-30 15:18:22 +02:00
h7x4	9db1b7f2e3	home: set up git-maintenance daemon	2024-06-30 14:39:36 +02:00
h7x4	47c0ee8b68	flake.nix: create per host home-manager config files	2024-06-30 14:35:38 +02:00
h7x4	dcee005a05	{flake.nix,common}: remove inputs.fonts	2024-06-29 14:32:38 +02:00
h7x4	d470c2064c	common: move nix-builders to separate files	2024-06-29 14:04:55 +02:00
h7x4	34f127c9a1	hosts/eisei: drop	2024-06-29 13:48:40 +02:00
h7x4	977864f85b	hosts/common.nix -> hosts/common/default.nix	2024-06-29 13:48:40 +02:00
h7x4	09d0bc29e0	{tsuki/dosei}: set up wstunnel	2024-06-29 13:48:40 +02:00
h7x4	38d86e859e	common/npm: remove	2024-06-26 20:42:49 +02:00
h7x4	869aa0d285	Initialize nixos config for dosei	2024-06-26 20:37:40 +02:00
h7x4	88d776149d	common/light: only add udev, use key daemon from hm	2024-06-26 20:32:26 +02:00
h7x4	6e4d125b63	common: specify stateVersion per machine	2024-06-26 20:31:15 +02:00
h7x4	cd4a003816	common: switch from pulseaudio to pipewire	2024-06-26 20:29:25 +02:00
h7x4	7c3e6fcf42	tsuki: fix eval	2024-06-25 22:26:09 +02:00
h7x4	e372398ca0	kasei: fix oopsie	2024-06-25 21:25:55 +02:00
h7x4	de6e83649e	{ssh,home/ssh}: include secret configuration	2024-06-25 20:40:04 +02:00
h7x4	067a97bfbc	common/nix: add github access tokens	2024-06-25 20:21:16 +02:00
h7x4	f74c1f7aa8	secrets: split secrets per machine to reduce conflicts	2024-06-25 19:27:23 +02:00
h7x4	96a2a3b3a0	kasei: add binfmt.emulatedSystems	2024-06-25 19:03:00 +02:00
h7x4	f3bcaad18b	fcitx5: move configuration to home-manager	2024-06-25 19:01:07 +02:00
h7x4	73f527559e	tsuki/nginx: add vhost for experimental mutable bluemap setup	2024-06-10 00:50:11 +02:00
h7x4	a6c24b04a1	tsuki/nhk-easy-news-scraper: temporarily disable statedir + bindmount	2024-06-10 00:48:02 +02:00
h7x4	e3cedee060	tsuki/matrix-synapse: add dependencies to systemd slice	2024-06-10 00:46:49 +02:00
h7x4	53c6c32fb8	tsuki/plex: remove security hardening, included in nixos 24.05	2024-06-10 00:45:19 +02:00
h7x4	3a81abb683	tsuki/matrix-stickers: update hash for stickerpack	2024-06-10 00:44:39 +02:00
h7x4	9d090da7cd	rebase: remove mx-puppet-discord	2024-06-10 00:43:55 +02:00
h7x4	9187a62d6f	tsuki: use ensureDBOwnership for postgres for nixos 24.05 migration	2024-06-10 00:43:04 +02:00
h7x4	68bf2cd1b0	inputs/maunium-stickerpicker-nix: pin to release	2024-06-09 16:18:42 +02:00
h7x4	c7123f23ac	tsuki/invidious: remove	2024-06-09 16:13:32 +02:00
h7x4	e943f2fe5f	tsuki/headscale: disable	2024-06-09 16:13:32 +02:00
h7x4	830e5477f3	tsuki/navidrome: remove	2024-06-09 16:13:31 +02:00
h7x4	7f36a1b8c8	tsuki/mx-puppet-discord: remove	2024-06-09 16:13:31 +02:00
h7x4	2a388e29a5	tsuki/mautrix-facebook: remove	2024-06-09 16:13:31 +02:00
h7x4	2b0968283d	tsuki/gitea: remove	2024-06-09 16:13:31 +02:00
h7x4	a20bb288aa	tsuki/jupyter: remove	2024-06-09 15:40:57 +02:00
h7x4	3b736e4c61	tsuki/pgadmin: remove	2024-06-09 15:34:09 +02:00
h7x4	358a668aa7	tsuki/hydra: remove	2024-06-09 15:30:17 +02:00
h7x4	37a43a2bd9	tsuki/gitea-runners: init	2024-06-09 15:25:47 +02:00
h7x4	43cabb09ef	kasei/avahi: setup	2024-06-08 12:47:46 +02:00
h7x4	5bdf629e2f	nix-ld: setup	2024-06-08 12:45:43 +02:00
h7x4	89a667ec7e	nix: remove repl-flake experimental feature	2024-06-08 12:45:16 +02:00
h7x4	8dc56e4aa7	treewide: override several programs to conform to xdg dir spec	2024-06-08 12:37:01 +02:00
h7x4	9caab9f6a7	start update to nixpkgs 24.05 by updating kasei and common	2024-06-02 17:17:24 +02:00
h7x4	8f73eaf1b4	fonts: fix deprecated option names	2024-06-02 16:36:22 +02:00
h7x4	299eee4238	common: add more nix builder declarations	2024-06-02 16:34:07 +02:00
h7x4	29579969a4	common: declare local flake registry	2024-06-02 16:32:23 +02:00
h7x4	5dca478291	fcitx: use declarative config	2024-06-02 16:31:08 +02:00
h7x4	a8bfbbc532	common: add h7x4 to wireshark group	2024-06-02 16:30:31 +02:00
h7x4	4f561c1dae	gnupg: use curses pinentry	2024-06-02 16:30:09 +02:00
h7x4	c902040ade	common: move sudo-lecture out of etc	2024-06-02 16:29:48 +02:00
h7x4	347a731839	kasei: misc general config	2024-06-02 16:26:44 +02:00
h7x4	fce206e772	kasei: setup keybase using module	2024-06-02 16:18:56 +02:00
h7x4	dd800a3794	tsuki/nhk-scraper: WIP changes	2024-01-23 05:51:37 +01:00
h7x4	9f2e7f7ac1	tsuki/nginx: remove proxmox vhost	2024-01-23 05:49:17 +01:00
h7x4	df5f0dc9c4	tsuki/matrix: use postgres through socket	2024-01-23 05:46:24 +01:00
h7x4	4f020f4cdd	tsuki/matrix: downscale workers	2024-01-23 05:46:06 +01:00
h7x4	b8daea8fc1	tsuki/headscale: conditional config	2024-01-23 05:40:52 +01:00
h7x4	4d2875d168	tsuki/hedgedoc: use upstream module	2024-01-23 05:40:19 +01:00
h7x4	22f5345026	tsuki/hydra: harden server unit	2024-01-23 05:36:39 +01:00
h7x4	ce5c3666b9	tsuki/jupyter: set up tmpdirs for notebooks	2024-01-23 05:35:58 +01:00
h7x4	1ea23dc42e	tsuki: set system.stateVersion	2024-01-23 05:35:20 +01:00
h7x4	56df2f5e10	tsuki: lowercase hostname	2024-01-23 05:33:48 +01:00
h7x4	8ce9100913	kanidm: explicitly bind to localhost	2024-01-23 05:32:34 +01:00
h7x4	d629eedaaf	tsuki/navidrome: conditional config	2024-01-23 05:31:26 +01:00
h7x4	72e7626e9d	tsuki/postgres: tune for bare metal setup	2024-01-23 05:31:06 +01:00
h7x4	f49d3665fc	tsuki/vaultwarden: disable invitations	2024-01-23 05:30:14 +01:00
h7x4	fe50d92f8c	tsuki/vaultwarden: conditional config	2024-01-23 05:29:57 +01:00
h7x4	3d2825d1ec	tsuki/samba: init	2024-01-23 05:29:17 +01:00
h7x4	1efd3d4f0a	tsuki/kanidm: set up backups	2024-01-23 05:27:43 +01:00
h7x4	851d0c1fd0	tsuki/prometehus: set up slice for exporters	2024-01-23 05:26:22 +01:00
h7x4	0d3e805611	tsuki: move to bare metal, set up zfs	2024-01-23 05:24:47 +01:00
h7x4	3a52ba8901	treewide: update to nixos 23.11	2023-12-18 20:59:48 +01:00
h7x4	b1650e91a6	kasei: split services into services directory	2023-12-11 13:27:40 +01:00
h7x4	7193a12ac2	tsuki/services: remove some uses of secret ports	2023-10-06 18:27:21 +02:00
h7x4	3d613d1ac9	tsuki/invidious: use socket activation	2023-10-06 18:27:19 +02:00
h7x4	424fea0dc8	tsuki/jupyter: use socket activation	2023-10-06 18:27:18 +02:00
h7x4	5bb10df9e1	tsuki/borg: partial systemd hardening ... There's still quite a bit to do, but the service fails on a weird option that I've not been able to pin down. At least this is better than nothing ¯\_(ツ)_/¯	2023-10-06 18:27:17 +02:00
h7x4	450d26cf4b	tsuki/atuin: use socket activation	2023-10-06 18:27:16 +02:00
h7x4	aca2962eec	tsuki/vaultwarden: use socket activation	2023-10-06 18:27:15 +02:00
h7x4	caedfe1810	tsuki/matrix/stickers: use new module and add lots of stickerpacks	2023-10-06 18:27:14 +02:00
h7x4	6663a8f280	tsuki/atuin: systemd harden	2023-07-28 22:25:50 +02:00
h7x4	dec150ae98	gpg agent: systemwide -> homemanager	2023-07-28 22:23:43 +02:00
h7x4	5f7eb0c8a5	tsuki/prometheus: add exporters for hedgedoc and gitea	2023-07-28 22:09:43 +02:00
h7x4	d74ed2d045	tsuki/grafana: enable oauth2, misc hardening	2023-07-28 22:05:23 +02:00
h7x4	816a46603a	tsuki/vaultwarden: systemd harden	2023-07-28 22:05:22 +02:00
h7x4	b5874e2bcd	tsuki/navidrome: init	2023-07-28 22:05:22 +02:00
h7x4	c2026eefeb	tsuki/nginx: small refactor	2023-07-28 22:05:22 +02:00
h7x4	e6605b3a73	common/sshd: socket activate	2023-07-28 22:05:21 +02:00
h7x4	c98a1a0541	tsuki/jupyter: harden security with sops and systemd	2023-07-28 22:00:07 +02:00
h7x4	4456244f2d	modules: add modules for socket activation	2023-07-28 21:32:13 +02:00
h7x4	f1e8c87acd	tsuki/configuration.nix: remove a few unused imports	2023-07-12 23:43:23 +02:00
h7x4	1f5832074b	tsuki/taskserver: (unfinished) start setting up taskserver and taskwarrior	2023-07-12 23:42:07 +02:00
h7x4	6c2bd3f2d5	tsuki/invidious: remove redundant code, add comments	2023-07-12 23:38:41 +02:00
h7x4	394a932988	tsuki/nginx: misc: ... - Move temporary website into its own file - Collect all http uris into upstreams - Convert some upstreams to UNIX sockets, as changed in the last few commits	2023-07-12 23:36:57 +02:00
h7x4	24a02d386c	tsuki/hedgedoc: misc: ... - Experiment with reducing the number of options in the module - Use UNIX socket behind nginx - "Upstream" systemd hardening to module	2023-07-12 23:34:23 +02:00
h7x4	5ea58f1b98	tsuki/gitea: use UNIX socket behind gitea	2023-07-12 23:30:39 +02:00