Oystein Kristoffer Tveit oysteikt
oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 20:07:17 +02:00
loki: use https, limit endpoint exposure

also DNS for the virtual host...

oysteikt pushed to main at Drift/pvv-nixos-config 2026-06-12 20:01:33 +02:00
526b55c49a {ildkule/prometheus,base}: send stats over HTTPS through nginx
526b55c49a {ildkule/prometheus,base}: send stats over HTTPS through nginx
oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 19:43:33 +02:00
loki: use https, limit endpoint exposure

Need to change the host in the fluentbit log exporter to match the virtualhost.

I suppose we also don't have any loki exporters on the non-nixos machines, so no salt changes needed.

0ef44d58d5 {ildkule/prometheus,base}: send stats over HTTPS through nginx
oysteikt created branch prometheus-stats-through-nginx-over-https in Drift/pvv-nixos-config 2026-06-12 19:38:35 +02:00
oysteikt pushed to main at Drift/pvv-nixos-config 2026-06-12 18:41:10 +02:00
e80189c6eb temmie/userweb: stop cating passwd on startup
oysteikt pushed to main at Drift/pvv-nixos-config 2026-06-12 18:39:28 +02:00
56a51e4c6f temmie/userweb: mount homedirs under /amd
oysteikt pushed to main at Drift/pvv-nixos-config 2026-06-12 18:26:51 +02:00
f54109f6f3 temmie/userweb: set handlers for php and perl scripts
oysteikt commented on issue Drift/issues#72 2026-06-12 18:19:01 +02:00
Set up new userweb system on temmie (kill tom)

I believe the homedirs were mounted under /amd at some point, i.e. /amd/homepvva/a/<user>. Let's bindmount there as well.

oysteikt pushed to main at Drift/pvv-nixos-config 2026-06-12 18:09:58 +02:00
9556098fdd temmie/userweb: add extra php mimetype mappings
oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 16:55:03 +02:00
loki: use https, limit endpoint exposure

I suppose we could also firewall the nginx to only accept data from the pvv subnet in any case

oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 16:54:12 +02:00
loki: use https, limit endpoint exposure

Where did you find the suggestion to only expose this endpoint btw? Are we sure that we don't need any other endpoints like GET /ready?

https://grafana.com/docs/loki/latest/reference/loki-http…

oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 16:33:28 +02:00
loki: use https, limit endpoint exposure

Tok meg friheten til å bare fikse litt, siden det er SOC issue

oysteikt pushed to loki/disable-public-pprof at Drift/pvv-nixos-config 2026-06-12 16:32:51 +02:00
2805c5e78d ildkule/loki: firewall all endpoints except push API
5763a76136 user/vegardbm: change shell to zsh and add ssh key
b57a935b4c base/rsyslogd: init
b4582a160f skrot/dibbler: rotate database password
ac094d350d base/timesyncd: specify ntp servers
Compare 28 commits »
oysteikt commented on pull request Drift/pvv-nixos-config#144 2026-06-12 14:45:28 +02:00
loki: use https, limit endpoint exposure

Hvordan havna radicale i pr-en?

oysteikt opened issue mugiten/jadb#114 2026-06-11 20:41:07 +02:00
word search: trim number prefixes off counters
oysteikt pushed to hovudgren at Projects/where-are-my-friends 2026-06-11 19:54:03 +02:00
40424da19f Run clang-format
oysteikt pushed to hovudgren at Projects/where-are-my-friends 2026-06-11 19:51:38 +02:00
d52f679df0 clang-format
3c2c462710 test/minecraft: test parse_multiple_player_entities
9a145b2939 minecraft: split parse_multiple_player_entities off query_player_entities
8281c700bc test/minecraft: test parse_player_entity
20171830ea minecraft: query and parse player positions
Compare 7 commits »
oysteikt opened issue Projects/where-are-my-friends#16 2026-06-11 19:18:23 +02:00
Use dynamically sized data structure to store RCON multipacket output