Commit Graph

45 Commits

Author SHA1 Message Date
oysteikt 2a53c6b420 tsuki/nginx: set LimitNOFILE 2025-03-13 16:28:05 +01:00
oysteikt 45c51639ca tsuki/nginx: fix minecraft map hosting 2024-11-28 16:34:43 +01:00
oysteikt 596d5429ba tsuki/nginx: general optimizations 2024-11-28 16:32:07 +01:00
oysteikt e6d429a970 tsuki/matrix-appservice-irc: reinit 2024-11-28 16:31:27 +01:00
oysteikt 2c325cf540 treewide: remove more usage of nix-secrets repository 2024-11-15 10:20:32 +01:00
oysteikt a971075a58 tsuki/nextcloud: drop 2024-07-08 15:45:58 +02:00
oysteikt 09d0bc29e0 {tsuki/dosei}: set up wstunnel 2024-06-29 13:48:40 +02:00
oysteikt 73f527559e tsuki/nginx: add vhost for experimental mutable bluemap setup 2024-06-10 00:50:11 +02:00
oysteikt c7123f23ac tsuki/invidious: remove 2024-06-09 16:13:32 +02:00
oysteikt e943f2fe5f tsuki/headscale: disable 2024-06-09 16:13:32 +02:00
oysteikt 830e5477f3 tsuki/navidrome: remove 2024-06-09 16:13:31 +02:00
oysteikt 2b0968283d tsuki/gitea: remove 2024-06-09 16:13:31 +02:00
oysteikt a20bb288aa tsuki/jupyter: remove 2024-06-09 15:40:57 +02:00
oysteikt 3b736e4c61 tsuki/pgadmin: remove 2024-06-09 15:34:09 +02:00
oysteikt 358a668aa7 tsuki/hydra: remove 2024-06-09 15:30:17 +02:00
oysteikt 9f2e7f7ac1 tsuki/nginx: remove proxmox vhost 2024-01-23 05:49:17 +01:00
oysteikt 3d613d1ac9 tsuki/invidious: use socket activation 2023-10-06 18:27:19 +02:00
oysteikt 424fea0dc8 tsuki/jupyter: use socket activation 2023-10-06 18:27:18 +02:00
oysteikt 450d26cf4b tsuki/atuin: use socket activation 2023-10-06 18:27:16 +02:00
oysteikt aca2962eec tsuki/vaultwarden: use socket activation 2023-10-06 18:27:15 +02:00
oysteikt caedfe1810 tsuki/matrix/stickers: use new module and add lots of stickerpacks 2023-10-06 18:27:14 +02:00
oysteikt b5874e2bcd tsuki/navidrome: init 2023-07-28 22:05:22 +02:00
oysteikt c2026eefeb tsuki/nginx: small refactor 2023-07-28 22:05:22 +02:00
oysteikt c98a1a0541 tsuki/jupyter: harden security with sops and systemd 2023-07-28 22:00:07 +02:00
oysteikt 394a932988 tsuki/nginx: misc:
- Move temporary website into its own file
- Collect all http uris into upstreams
- Convert some upstreams to UNIX sockets, as changed in the last few
  commits
2023-07-12 23:36:57 +02:00
oysteikt 25b6f0f3e9 tsuki/vaultwarden: add vaultwarden, password manager 2023-07-12 02:06:38 +02:00
oysteikt 0e3a4c35d2 tsuki/atuin: set up atuin server 2023-07-12 02:06:16 +02:00
oysteikt fc0e4f6c52 tsuki/nginx/www: real website dead, add temporary website 2023-07-12 02:04:57 +02:00
oysteikt 949f228c97 tsuki/hydra: put all services below system-hydra.slice 2023-07-12 02:04:56 +02:00
oysteikt 7f8d60057d tsuki/headscale: fix oauth2, and set up tailscale 2023-07-12 02:04:53 +02:00
oysteikt 32885239c3 tsuki/pgadmin: misc
- The pgadmin config has grown, and as a result, it has been split from
    the postgres file.
- Setup OAuth
- Setup uWSGI and forward to nginx via socket
  (This last part is still a little borked, and the service is not
  functioning entirely just yet)
2023-05-08 02:36:13 +02:00
oysteikt 7cdf122c58 tsuki: set up invidious 2023-05-08 02:36:10 +02:00
oysteikt 7a0fcf7805 tsuki: configure wildcard certs for nginx 2023-03-08 14:54:43 +01:00
oysteikt dd6c99226e tsuki: set up hedgedoc
the dynmap subdomain was also renamed from "dyn" to "map" in this commit
2023-03-08 14:54:40 +01:00
oysteikt 0df70d6c72 tsuki: add well-known autoconfig for thunderbird mail 2023-03-07 23:15:19 +01:00
oysteikt d5ae85092c tsuki: set up kanidm 2023-03-07 23:15:18 +01:00
oysteikt a08f6ce28e tsuki: add .well-known/matrix/client 2023-02-25 21:10:39 +01:00
oysteikt 47d8aa7899 tsuki: add headscale 2023-01-16 17:16:42 +01:00
oysteikt 3820be9ef9 tsuki: update matrix stickers 2023-01-16 17:16:39 +01:00
oysteikt 1b0ed26f15 tsuki: set up minecraft server 2023-01-16 16:06:34 +01:00
oysteikt c78b2a2c26 tsuki: add osuchan service 2023-01-04 14:32:11 +01:00
oysteikt aea736c2df tsuki: remove a lot of unused services
Removed:
- dokuwiki (this was never properly set up)
- libvirt (this is already a virtual machine, double virtualization bad)
- openldap (this will become the responsibility of keycloak)
- openvpn (this will become the responsibility of head/tailscale)
- samba (this is now the responsibility of TrueNAS)
- searx (I never used this)
- gitlab (this has become the responsibility of gitea and hydra)
- syncthing (this was never properly set up)

The nix cache nginx entry is also paused, as it wasn't functional.

In this commit and the previous commit, the nginx config for the
minecraft server was also taken down, as the whole host is deleted.
The plan is to set it up again, this time using tsuki.
2023-01-03 22:52:24 +01:00
oysteikt 3d088d73be tsuki: add maunium stickerpickers 2023-01-03 22:46:21 +01:00
oysteikt f9280452fb nginx: fix failing hosts
- nani.wtf has changed flake structure
- jupyter need websockets
2022-11-08 14:28:59 +01:00
oysteikt 1881cb0bca Extended nani.wtf/.well-known with some new stuff
- Added WKD openpgp key
- Added security.txt
- Added keybase.txt
2022-10-13 23:42:42 +02:00