Commit Graph

1652 Commits

Author SHA1 Message Date
Kierán Meinhardt
6104ec910e external: add kmein ed25519 keys 2021-12-28 16:10:19 +01:00
lassulus
c7b7bd48b5 l tinc: define ed25519 keys for all hosts 2021-12-28 16:09:42 +01:00
lassulus
8692db1285 Merge remote-tracking branch 'mic92/master' 2021-12-25 20:08:31 +01:00
cb26de2f5c matchbox: remove ipv4 2021-12-25 08:39:02 +01:00
tv
969bd9767e exim-smarthost: dkim_strict = true 2021-12-24 10:19:13 +01:00
tv
b33381d15e exim-smarthost: use LoadCredential 2021-12-24 09:22:41 +01:00
tv
7219292dd5 repo-sync: use LoadCredential 2021-12-24 00:51:28 +01:00
tv
71d11e8f2b repo-sync: add group 2021-12-24 00:51:28 +01:00
tv
234d9d96bf krebs.systemd: allow LoadCredential to be a string 2021-12-24 00:51:28 +01:00
lassulus
2be08e3c52 systemd module: use LoadCredentials from config.systemd.services 2021-12-23 23:59:22 +01:00
lassulus
29b796f521 Merge remote-tracking branch 'ni/master' 2021-12-23 21:49:55 +01:00
tv
d4521eb339 krebs.systemd: allow reload if credentials change 2021-12-23 20:18:28 +01:00
tv
1cf495d6eb krebs.systemd: support credentials of any service 2021-12-23 20:18:28 +01:00
a9d324f176 mic92: update ip for eve 2021-12-23 08:36:49 +01:00
tv
5f7ab23ebf krebs.tinc: drop environment.systemPackages TODO
Nobody bothered about this for more than five years.  And even though
fixable, chances are quite high that this feature is not needed anymore.
2021-12-23 03:20:36 +01:00
tv
8029e80632 krebs.tinc: drop api and imp boilerplate 2021-12-23 03:16:44 +01:00
tv
018018e16b krebs.tinc: don't bother aliasing packages 2021-12-23 03:12:58 +01:00
tv
21e407aa59 krebs.tinc: use LoadCredential 2021-12-23 01:59:25 +01:00
tv
d6ebd497f0 krebs.systemd.services: restart by LoadCredential 2021-12-23 01:59:25 +01:00
tv
448cd3b9af Merge remote-tracking branch 'prism/master' 2021-12-22 23:33:05 +01:00
tv
2656cbf2a9 empty -> emptyDirectory 2021-12-22 23:27:07 +01:00
lassulus
c9f0c17660 tinc module: reload instead of restart
remove enableLegacy option since reloading is dependant on
/etc/tinc/<netname> existing
2021-12-22 13:58:30 +01:00
lassulus
8f94e0bc4b Merge remote-tracking branch 'ni/master' 2021-12-21 16:45:56 +01:00
tv
e888b00a6b secret service: don't be wanted by multi-user.target
This fixes an issue causing secret-trigger-*.service to be restarted on
every activation because after triggering these services are dead, this
in turn causes restarts of secret-*.service.

And finally this caused the issue of always restarting tinc services
as they are PartOf= a couple of secert-*.service.
2021-12-21 15:27:44 +01:00
lassulus
0a7d779cc1 iptables module: add compat layer to networking.firewall 2021-12-21 12:38:07 +01:00
lassulus
d6f79283bf tinc module: use tinc_pre as default package 2021-12-21 12:08:47 +01:00
lassulus
5b71cbae40 Merge remote-tracking branch 'ni/master' 2021-12-20 21:23:50 +01:00
a7f26ef99b mic92: add mickey.r 2021-12-20 19:00:45 +01:00
tv
dbc54fb823 github-known-hosts: update list 2021-12-18 09:50:06 +01:00
lassulus
f2533d8892 ci: add gcroots for successful builds 2021-12-11 12:00:36 +01:00
lassulus
abd82c4faf ca.r: serve ca.crt via nginx 2021-12-09 14:52:35 +01:00
lassulus
fba330ab36 wiki.r: add acme ssl config 2021-12-09 14:30:25 +01:00
lassulus
155e3e18b0 realwallpaper: use new graph.r endpoint 2021-12-09 11:35:27 +01:00
lassulus
e5fc654f50 add ACME ca via ca.r 2021-12-09 11:31:10 +01:00
b981c43a97 mic92: remove ipv4 from turingmachine 2021-12-08 21:08:53 +01:00
2bcac9f89c mic92: drop redundant addrs blocks 2021-12-08 21:08:53 +01:00
9900a57f3f mic92: drop eva's ipv4 address 2021-12-08 21:08:53 +01:00
759a471f88 mic92: drop eddie 2021-12-08 21:08:53 +01:00
makefu
3f6219e251 users: add xkey ssh key, use for logging into puyak 2021-12-08 16:15:40 +01:00
lassulus
b48f08ea8e ci: buildbot-classic -> buildbot; cleanup 2021-12-08 16:15:40 +01:00
Kierán Meinhardt
0d329f970b external: add moodle.kmein.r 2021-12-08 12:58:06 +01:00
makefu
28d5d0233a
module airdcpp: make group explicit 2021-12-04 22:43:59 +01:00
makefu
22766982a2
module urlwatch: create group for user 2021-12-04 22:20:50 +01:00
makefu
c22610c8e6
Merge remote-tracking branch 'lass/21.11' into 21.11 2021-12-04 18:33:43 +01:00
lassulus
9f6c37f21c github-host-sync: add group 2021-12-01 18:31:53 +01:00
lassulus
bb709ce412 buildbot: add groups to users 2021-12-01 18:30:57 +01:00
lassulus
5d6bbe6797 brockman: add group 2021-12-01 18:29:24 +01:00
lassulus
cd367626d4 tinc_graphs: add groups 2021-12-01 18:28:26 +01:00
lassulus
c5ade4fdd6 realwallpaper: add group 2021-12-01 18:27:04 +01:00
lassulus
280ed594fb htgen: generate group for every user 2021-12-01 18:11:58 +01:00
makefu
9301506249
Merge remote-tracking branch 'lass/master' 2021-12-01 11:21:09 +01:00
lassulus
b79f5ab97d Merge remote-tracking branch 'ni/master' 2021-11-30 23:09:27 +01:00
Kierán Meinhardt
948584f291 external: kmein takes over graph.r 2021-11-30 22:09:06 +01:00
lassulus
8a0685d859 l: init tablet.r 2021-11-27 23:48:41 +01:00
lassulus
d71fe62fff l prism.r: add jelly.r alias + proxy_pass 2021-11-27 23:47:15 +01:00
lassulus
ee59532c60 l prism.r: add internet ipv6 address 2021-11-27 23:45:26 +01:00
makefu
13c525e548
Merge remote-tracking branch 'mic/master' 2021-11-26 14:13:30 +01:00
makefu
463dc7ea67
Merge remote-tracking branch 'lass/master' 2021-11-26 14:12:34 +01:00
f1bca35b39 eve: drop ipv6 2021-11-26 10:36:23 +01:00
a87fa2d11d mic92: add keller ed215519 2021-11-24 20:07:38 +01:00
makefu
44d45e7c2c
k/3/m: add arcadeomat
brain is also updated
2021-11-24 08:29:27 +01:00
Luis-Hebendanz
f2e83be6a3 qubasa: add kelle.r 2021-11-23 17:44:50 +01:00
db5c1b6659 mic92: add qubasa's public ed25519 key 2021-11-23 17:44:50 +01:00
Luis-Hebendanz
a0c5805e9e qubasa: changed tinc pubkey 2021-11-23 17:44:50 +01:00
600f9cbe61 sauron: add ipv6 2021-11-23 17:44:50 +01:00
87b7045f53 mic92: add dns name to sandro's machine 2021-11-23 17:44:50 +01:00
a36a09931e mic92: update eva's ip 2021-11-23 17:44:50 +01:00
2e2f5969ec mic92: add public ipv6/ipv4 for ryan/graham 2021-11-23 17:44:50 +01:00
lassulus
ff9a042e70 l dishfire.r: revive with minimal config 2021-11-23 12:47:06 +01:00
lassulus
3d1544c785 Revert "l: rip dishfire.r"
This reverts commit 61e6552da3.
2021-11-23 11:43:25 +01:00
tv
8f97f5e2e1 krebs zone-head-config: fix style 2021-11-21 20:39:28 +01:00
lassulus
b0f39ae34d filebitch.r: define shack prefix 2021-11-14 17:15:17 +01:00
lassulus
ebc830a91f puyak.r: define cores 2021-11-14 17:14:10 +01:00
lassulus
14e6157d30 l prism.r: add nets.internet.ip4.prefix 2021-11-08 19:59:03 +01:00
lassulus
4452b26816 Merge remote-tracking branch 'ni/master' 2021-11-08 09:06:57 +01:00
tv
d7f44debbd exim: fix for manual 2021-11-08 05:14:49 +01:00
tv
6940c3ac83 htgen: fix for manual 2021-11-08 05:14:49 +01:00
tv
13a1eb3fc5 reaktor2: fix for manual 2021-11-08 05:14:49 +01:00
tv
07d9619956 github-hosts-sync: fix for manual 2021-11-08 05:14:49 +01:00
tv
29c59684a3 exim-smart-host: fix for manual 2021-11-08 05:14:49 +01:00
tv
ebd5fbbe05 buildbot: fix for manual 2021-11-08 05:14:49 +01:00
tv
c8c0f2597f git: fix for manual 2021-11-08 05:14:49 +01:00
tv
96965e3578 rtorrent: fix for manual 2021-11-08 05:14:49 +01:00
tv
8e5dc749c5 shadow: fix for manual 2021-11-08 05:14:49 +01:00
tv
1247440a3d tinc: fix for manual 2021-11-08 05:14:49 +01:00
tv
ae0c0de7f1 github-hosts-sync: fix for manual 2021-11-08 05:11:27 +01:00
tv
87f43a3be4 tinc_graphs: fix for manual 2021-11-08 05:11:27 +01:00
tv
551cfeadef bepasty-server: fix for manual 2021-11-08 05:11:27 +01:00
tv
53f192125b airdcpp: fix default hubs.*.Nick 2021-11-08 05:01:20 +01:00
tv
85604f02df krebs.build.profile: fix type 2021-11-07 21:19:09 +01:00
lassulus
0e668121a1 git: set fcgiwrap group as maingroup 2021-11-05 14:35:03 +01:00
tv
2fccbc483d github-known-hosts: update list 2021-11-04 14:22:01 +01:00
lassulus
9fd58eb162 l codimd: move to pad.lassul.us 2021-10-31 12:35:16 +01:00
xkey
e1fdb4728c external: modify catalonia.r 2021-10-30 15:35:43 +02:00
lassulus
0f9c6ee738 news.r, puyak.r: use dynamic tinc port 2021-10-24 20:09:51 +02:00
lassulus
d8f72378dc l domsen: add roundcube at mail.lassul.us 2021-10-24 20:03:16 +02:00
lassulus
6e61a2d9fc sync-containers module: make chmod failsafe 2021-10-24 18:27:58 +02:00
lassulus
4fa8f74fc0 solanum: use upstream service 2021-10-24 18:25:51 +02:00
lassulus
f455668ff3 l: remove red.r morpheus.r uriel.r 2021-10-24 11:06:43 +02:00
0564414a31 mic92: add aenderpad 2021-10-23 14:58:10 +02:00