Commit Graph

3484 Commits

Author SHA1 Message Date
lassulus
c7b7bd48b5 l tinc: define ed25519 keys for all hosts 2021-12-28 16:09:42 +01:00
lassulus
8692db1285 Merge remote-tracking branch 'mic92/master' 2021-12-25 20:08:31 +01:00
cb26de2f5c matchbox: remove ipv4 2021-12-25 08:39:02 +01:00
tv
969bd9767e exim-smarthost: dkim_strict = true 2021-12-24 10:19:13 +01:00
tv
b33381d15e exim-smarthost: use LoadCredential 2021-12-24 09:22:41 +01:00
tv
7219292dd5 repo-sync: use LoadCredential 2021-12-24 00:51:28 +01:00
tv
71d11e8f2b repo-sync: add group 2021-12-24 00:51:28 +01:00
tv
234d9d96bf krebs.systemd: allow LoadCredential to be a string 2021-12-24 00:51:28 +01:00
lassulus
2be08e3c52 systemd module: use LoadCredentials from config.systemd.services 2021-12-23 23:59:22 +01:00
lassulus
29b796f521 Merge remote-tracking branch 'ni/master' 2021-12-23 21:49:55 +01:00
tv
d4521eb339 krebs.systemd: allow reload if credentials change 2021-12-23 20:18:28 +01:00
tv
1cf495d6eb krebs.systemd: support credentials of any service 2021-12-23 20:18:28 +01:00
a9d324f176 mic92: update ip for eve 2021-12-23 08:36:49 +01:00
tv
5f7ab23ebf krebs.tinc: drop environment.systemPackages TODO
Nobody bothered about this for more than five years.  And even though
fixable, chances are quite high that this feature is not needed anymore.
2021-12-23 03:20:36 +01:00
tv
8029e80632 krebs.tinc: drop api and imp boilerplate 2021-12-23 03:16:44 +01:00
tv
018018e16b krebs.tinc: don't bother aliasing packages 2021-12-23 03:12:58 +01:00
tv
21e407aa59 krebs.tinc: use LoadCredential 2021-12-23 01:59:25 +01:00
tv
d6ebd497f0 krebs.systemd.services: restart by LoadCredential 2021-12-23 01:59:25 +01:00
tv
448cd3b9af Merge remote-tracking branch 'prism/master' 2021-12-22 23:33:05 +01:00
tv
2656cbf2a9 empty -> emptyDirectory 2021-12-22 23:27:07 +01:00
lassulus
c9f0c17660 tinc module: reload instead of restart
remove enableLegacy option since reloading is dependant on
/etc/tinc/<netname> existing
2021-12-22 13:58:30 +01:00
lassulus
8f94e0bc4b Merge remote-tracking branch 'ni/master' 2021-12-21 16:45:56 +01:00
tv
e888b00a6b secret service: don't be wanted by multi-user.target
This fixes an issue causing secret-trigger-*.service to be restarted on
every activation because after triggering these services are dead, this
in turn causes restarts of secret-*.service.

And finally this caused the issue of always restarting tinc services
as they are PartOf= a couple of secert-*.service.
2021-12-21 15:27:44 +01:00
lassulus
0a7d779cc1 iptables module: add compat layer to networking.firewall 2021-12-21 12:38:07 +01:00
lassulus
d6f79283bf tinc module: use tinc_pre as default package 2021-12-21 12:08:47 +01:00
lassulus
5b71cbae40 Merge remote-tracking branch 'ni/master' 2021-12-20 21:23:50 +01:00
lassulus
c573ac9f0e Merge remote-tracking branch 'mic92/master' 2021-12-20 21:23:36 +01:00
lassulus
f198b1b80a rss-bridge: 2021-04-20 -> 2021-12-02 2021-12-20 21:22:05 +01:00
a7f26ef99b mic92: add mickey.r 2021-12-20 19:00:45 +01:00
tv
dbc54fb823 github-known-hosts: update list 2021-12-18 09:50:06 +01:00
lassulus
9e2e237af5 Merge remote-tracking branch 'ni/master' 2021-12-15 09:15:13 +01:00
tv
c2ee574729 flameshot-once profile: +drawColor 2021-12-14 23:23:28 +01:00
tv
657aa2b1d8 flameshot-once profile: don't startup on launch 2021-12-14 23:23:28 +01:00
tv
e655784c49 flameshot-once profile: +showStartupLaunchMessage 2021-12-14 23:23:28 +01:00
tv
329aadc66b flameshot-once profile: +showSidePanelButton 2021-12-14 23:23:28 +01:00
tv
0dc6bc199a flameshot-once profile: +copyAndCloseAfterUpload 2021-12-14 23:23:28 +01:00
tv
0f764d9199 flameshot-once profile: don't check for updates 2021-12-14 23:23:28 +01:00
tv
8fdd9b3a8f flameshot-once profile: use toINI 2021-12-14 23:23:28 +01:00
lassulus
dfdcad1028 nixpkgs-unstable: bc5d683 -> b0bf5f8 2021-12-14 16:03:38 +01:00
lassulus
f35e8188d2 nixpkgs: -> 5730959 2021-12-14 16:03:07 +01:00
lassulus
f2533d8892 ci: add gcroots for successful builds 2021-12-11 12:00:36 +01:00
lassulus
6b59b7972a wiki: listen gollum on localhost only 2021-12-10 18:09:44 +01:00
lassulus
9841e402e2 wiki.r: listen on localhost, fix http redirect 2021-12-10 10:13:49 +01:00
lassulus
6d3ea779b6 rotate krebsAcmeCA.crt 2021-12-10 09:56:02 +01:00
lassulus
e4384e10e9 pkgs.generate-krebs-intermediate-ca: set vailidy to 1y 2021-12-10 09:55:47 +01:00
lassulus
42f9caa6f7 brockman: 4.0.1 -> 4.0.2 2021-12-09 22:58:13 +01:00
lassulus
abd82c4faf ca.r: serve ca.crt via nginx 2021-12-09 14:52:35 +01:00
lassulus
fba330ab36 wiki.r: add acme ssl config 2021-12-09 14:30:25 +01:00
lassulus
08cdf8a6d5 remove hardcoded ca-bundle 2021-12-09 14:12:03 +01:00
lassulus
155e3e18b0 realwallpaper: use new graph.r endpoint 2021-12-09 11:35:27 +01:00
lassulus
8e66a4ff65 wiki: add host proxy_header 2021-12-09 11:31:10 +01:00
lassulus
e5fc654f50 add ACME ca via ca.r 2021-12-09 11:31:10 +01:00
b981c43a97 mic92: remove ipv4 from turingmachine 2021-12-08 21:08:53 +01:00
2bcac9f89c mic92: drop redundant addrs blocks 2021-12-08 21:08:53 +01:00
9900a57f3f mic92: drop eva's ipv4 address 2021-12-08 21:08:53 +01:00
759a471f88 mic92: drop eddie 2021-12-08 21:08:53 +01:00
makefu
3f6219e251 users: add xkey ssh key, use for logging into puyak 2021-12-08 16:15:40 +01:00
lassulus
b48f08ea8e ci: buildbot-classic -> buildbot; cleanup 2021-12-08 16:15:40 +01:00
lassulus
8756011d2d disable includeAllModules again (builds take too long) 2021-12-08 13:17:31 +01:00
Kierán Meinhardt
0d329f970b external: add moodle.kmein.r 2021-12-08 12:58:06 +01:00
lassulus
0f3c4547f9 Merge remote-tracking branch 'ni/master' into 21.11 2021-12-08 08:15:51 +01:00
lassulus
f221b9cc16 nixpkgs-unstable: 6daa4a5 -> bc5d683 2021-12-08 08:14:22 +01:00
lassulus
1b47abf1b4 nixpkgs: a640d83 -> 1bd4bbd 2021-12-08 08:14:01 +01:00
tv
8dbcfef020 flameshot: admit NixOS 21.11 2021-12-07 21:58:34 +01:00
makefu
7c87ed750b
nixpkgs: a640d83 -> a640d83 2021-12-05 14:37:43 +01:00
makefu
28d5d0233a
module airdcpp: make group explicit 2021-12-04 22:43:59 +01:00
makefu
22766982a2
module urlwatch: create group for user 2021-12-04 22:20:50 +01:00
makefu
c3fec61aad
ma: add more groups to users 2021-12-04 21:02:32 +01:00
makefu
84e7a1f222
arcadeomat.r wolf.r: remove use_tempaddr
coming from stockholm module for network
2021-12-04 20:27:59 +01:00
makefu
421e66a138
filebitch.r puyak.r: disable more collectd 2021-12-04 20:25:56 +01:00
makefu
2d3a292ea0
shack: set groups for created users
demanded by 21.11 to set the group
2021-12-04 20:04:37 +01:00
makefu
da6d3992cf
filebitch.r puyak.r: disable stats collection via collectd 2021-12-04 20:03:51 +01:00
makefu
ecaaa1faae
mqtt: migrate to new configuration format 2021-12-04 19:08:15 +01:00
makefu
c22610c8e6
Merge remote-tracking branch 'lass/21.11' into 21.11 2021-12-04 18:33:43 +01:00
makefu
add6d81efc
shack glados: init ampel 2021-12-04 17:30:13 +01:00
lassulus
e44a4024a0 nixpkgs-unstable: 715f634 -> 6daa4a5 2021-12-03 15:51:05 +01:00
lassulus
3906ddedcc nixpkgs: 96b4157 -> a640d83 2021-12-03 15:50:36 +01:00
lassulus
9f6c37f21c github-host-sync: add group 2021-12-01 18:31:53 +01:00
lassulus
bb709ce412 buildbot: add groups to users 2021-12-01 18:30:57 +01:00
lassulus
5d6bbe6797 brockman: add group 2021-12-01 18:29:24 +01:00
lassulus
cd367626d4 tinc_graphs: add groups 2021-12-01 18:28:26 +01:00
lassulus
c5ade4fdd6 realwallpaper: add group 2021-12-01 18:27:04 +01:00
lassulus
280ed594fb htgen: generate group for every user 2021-12-01 18:11:58 +01:00
makefu
9301506249
Merge remote-tracking branch 'lass/master' 2021-12-01 11:21:09 +01:00
lassulus
6274e2c531 nixpkgs: 2452847 -> 96b4157 2021-12-01 10:56:31 +01:00
lassulus
44542b6914 nixpkgs: 21.05 -> 21.11 2021-12-01 10:56:11 +01:00
lassulus
b79f5ab97d Merge remote-tracking branch 'ni/master' 2021-11-30 23:09:27 +01:00
Kierán Meinhardt
948584f291 external: kmein takes over graph.r 2021-11-30 22:09:06 +01:00
lassulus
14c210d358 limit journald size 2021-11-28 00:12:00 +01:00
lassulus
8a0685d859 l: init tablet.r 2021-11-27 23:48:41 +01:00
lassulus
d71fe62fff l prism.r: add jelly.r alias + proxy_pass 2021-11-27 23:47:15 +01:00
lassulus
ee59532c60 l prism.r: add internet ipv6 address 2021-11-27 23:45:26 +01:00
makefu
13c525e548
Merge remote-tracking branch 'mic/master' 2021-11-26 14:13:30 +01:00
makefu
463dc7ea67
Merge remote-tracking branch 'lass/master' 2021-11-26 14:12:34 +01:00
f1bca35b39 eve: drop ipv6 2021-11-26 10:36:23 +01:00
a87fa2d11d mic92: add keller ed215519 2021-11-24 20:07:38 +01:00
makefu
44d45e7c2c
k/3/m: add arcadeomat
brain is also updated
2021-11-24 08:29:27 +01:00
makefu
a691ab622e
arcadeomat.r: update kernel
nvidia drivers are only available for < 5.9
2021-11-24 08:28:28 +01:00
makefu
d2776a87a5
Merge remote-tracking branch 'lass/master' 2021-11-24 08:27:30 +01:00
makefu
60b7a7bded
arcadeomat.r: init 2021-11-23 23:46:11 +01:00
tv
2b774a4866 mailaids: init from tv 2021-11-23 21:27:32 +01:00
tv
6cf266885d purebred-email: don't implicitly add MIME-Version 2021-11-23 21:27:32 +01:00
tv
cbab195e1f purebred-email: init at 0.4.3 2021-11-23 21:27:32 +01:00
Luis-Hebendanz
f2e83be6a3 qubasa: add kelle.r 2021-11-23 17:44:50 +01:00
db5c1b6659 mic92: add qubasa's public ed25519 key 2021-11-23 17:44:50 +01:00
Luis-Hebendanz
a0c5805e9e qubasa: changed tinc pubkey 2021-11-23 17:44:50 +01:00
600f9cbe61 sauron: add ipv6 2021-11-23 17:44:50 +01:00
87b7045f53 mic92: add dns name to sandro's machine 2021-11-23 17:44:50 +01:00
a36a09931e mic92: update eva's ip 2021-11-23 17:44:50 +01:00
2e2f5969ec mic92: add public ipv6/ipv4 for ryan/graham 2021-11-23 17:44:50 +01:00
lassulus
ff9a042e70 l dishfire.r: revive with minimal config 2021-11-23 12:47:06 +01:00
lassulus
3d1544c785 Revert "l: rip dishfire.r"
This reverts commit 61e6552da3.
2021-11-23 11:43:25 +01:00
tv
8f97f5e2e1 krebs zone-head-config: fix style 2021-11-21 20:39:28 +01:00
lassulus
60bebfcec0 flameshot: don't patch unknown versions 2021-11-21 18:25:39 +01:00
lassulus
a2768f5f73 nixpkgs-unstable: b165ce0 -> 715f634 2021-11-21 15:35:20 +01:00
lassulus
78f51e530b nixpkgs: f0869b1 -> 2452847 2021-11-21 15:18:10 +01:00
tv
e250f85838 Merge remote-tracking branch 'prism/master' 2021-11-21 13:44:39 +01:00
tv
a752af84be ircaids: utillinux -> unixtools.getopt 2021-11-21 12:42:28 +01:00
lassulus
b0f39ae34d filebitch.r: define shack prefix 2021-11-14 17:15:17 +01:00
lassulus
ebc830a91f puyak.r: define cores 2021-11-14 17:14:10 +01:00
lassulus
284de5b5b9 krebs: enable documentation for all modules 2021-11-14 09:35:35 +01:00
lassulus
14e6157d30 l prism.r: add nets.internet.ip4.prefix 2021-11-08 19:59:03 +01:00
lassulus
4452b26816 Merge remote-tracking branch 'ni/master' 2021-11-08 09:06:57 +01:00
tv
d7f44debbd exim: fix for manual 2021-11-08 05:14:49 +01:00
tv
6940c3ac83 htgen: fix for manual 2021-11-08 05:14:49 +01:00
tv
13a1eb3fc5 reaktor2: fix for manual 2021-11-08 05:14:49 +01:00
tv
07d9619956 github-hosts-sync: fix for manual 2021-11-08 05:14:49 +01:00
tv
29c59684a3 exim-smart-host: fix for manual 2021-11-08 05:14:49 +01:00
tv
ebd5fbbe05 buildbot: fix for manual 2021-11-08 05:14:49 +01:00
tv
c8c0f2597f git: fix for manual 2021-11-08 05:14:49 +01:00
tv
96965e3578 rtorrent: fix for manual 2021-11-08 05:14:49 +01:00
tv
8e5dc749c5 shadow: fix for manual 2021-11-08 05:14:49 +01:00
tv
1247440a3d tinc: fix for manual 2021-11-08 05:14:49 +01:00
tv
ae0c0de7f1 github-hosts-sync: fix for manual 2021-11-08 05:11:27 +01:00
tv
87f43a3be4 tinc_graphs: fix for manual 2021-11-08 05:11:27 +01:00
tv
551cfeadef bepasty-server: fix for manual 2021-11-08 05:11:27 +01:00
tv
53f192125b airdcpp: fix default hubs.*.Nick 2021-11-08 05:01:20 +01:00
tv
85604f02df krebs.build.profile: fix type 2021-11-07 21:19:09 +01:00
lassulus
0e668121a1 git: set fcgiwrap group as maingroup 2021-11-05 14:35:03 +01:00
tv
2fccbc483d github-known-hosts: update list 2021-11-04 14:22:01 +01:00
lassulus
1e90bd460a nixpkgs-unstable: 34ad3ff -> b165ce0 2021-11-02 10:20:27 +01:00
lassulus
192ea80b77 nixpkgs: 95eed9b -> f0869b1 2021-11-02 10:11:29 +01:00
lassulus
9fd58eb162 l codimd: move to pad.lassul.us 2021-10-31 12:35:16 +01:00
xkey
e1fdb4728c external: modify catalonia.r 2021-10-30 15:35:43 +02:00
lassulus
589acac74d Merge remote-tracking branch 'ni/master' 2021-10-25 15:58:59 +02:00
lassulus
6ad567a18e pkgs.nomads-cloud: put tmpfiles into tmpdir 2021-10-24 20:17:32 +02:00
lassulus
9fc5849786 pkgs.htgen-cyberlocker: fix erronous response 2021-10-24 20:15:45 +02:00
lassulus
0f9c6ee738 news.r, puyak.r: use dynamic tinc port 2021-10-24 20:09:51 +02:00
lassulus
d8f72378dc l domsen: add roundcube at mail.lassul.us 2021-10-24 20:03:16 +02:00
lassulus
6e61a2d9fc sync-containers module: make chmod failsafe 2021-10-24 18:27:58 +02:00
lassulus
4fa8f74fc0 solanum: use upstream service 2021-10-24 18:25:51 +02:00
lassulus
f455668ff3 l: remove red.r morpheus.r uriel.r 2021-10-24 11:06:43 +02:00
lassulus
1c98e211ff nixpkgs-unstable: 70088dc -> 34ad3ff 2021-10-24 09:54:04 +02:00
lassulus
e8aa5eb87e nixpkgs: ce7a119 -> 95eed9b 2021-10-24 09:53:11 +02:00
tv
4467830663 ircaids: 1.0.0 -> 1.0.1 2021-10-23 15:57:53 +02:00
lassulus
679922a783 Revert "rip Reaktor"
This reverts commit 55b137ba52.
2021-10-23 15:15:54 +02:00
0564414a31 mic92: add aenderpad 2021-10-23 14:58:10 +02:00
04ec7f8e7d mic92: add ed25519 for maurice 2021-10-23 14:58:10 +02:00
db9f0d97ec mic92: fix ips of maurice 2021-10-23 14:58:10 +02:00
b13aaa3e65 mic92: add maurice 2021-10-23 14:58:10 +02:00
6d51da9202 mic92: non-colliding ip address for graham 2021-10-23 14:58:10 +02:00
fd37549f82 mic92: add ryan & graham 2021-10-23 14:58:10 +02:00
lassulus
55b137ba52 rip Reaktor 2021-10-23 14:58:10 +02:00
lassulus
f6ef525049 Merge remote-tracking branch 'ni/master' 2021-10-23 12:10:26 +02:00
lassulus
1ea95b68f4 fetchWallpaper module: add group 2021-10-23 12:08:58 +02:00
lassulus
c5bab88a9e tinc module: add group for user 2021-10-23 12:07:40 +02:00
tv
a9bba92e0e krebs: stdenv.lib -> lib 2021-10-19 22:51:26 +02:00
Kierán Meinhardt
411cb36608 external: add names.kmein.r alias 2021-10-12 22:35:11 +02:00
tv
be5f4833fe pkgs: import relative stockholm lib only once
New overlay code in inspired by <nixpkgs/pkgs/top-level/stage.nix>.
2021-10-12 22:11:08 +02:00
lassulus
77c3aab5b8 pkgs: use relative stockholm.lib 2021-10-12 20:53:45 +02:00
lassulus
780a04e991 ircaids: move to dir 2021-10-12 20:13:57 +02:00
Kierán Meinhardt
e4793149c0 external: add bvg.kmein.r alias 2021-10-10 14:45:17 +02:00
lassulus
bc8acddc12 nixpkgs-unstable: 09cd65b -> 70088dc 2021-10-09 18:47:49 +02:00
lassulus
f05c7cb7ff nixpkgs: 6120ac5 -> ce7a119 2021-10-09 18:47:32 +02:00
lassulus
9a855d50a7 Merge remote-tracking branch 'ni/master' 2021-10-05 23:18:09 +02:00
tv
1b65517b44 irc-announce: use ircaids 2021-10-05 23:09:44 +02:00
tv
72d5a050e1 ircaids: init at 1.0.0 2021-10-05 22:59:35 +02:00
makefu
0b1cd67384
pkgs.tinc_graphs: 0.3.11 -> 0.4.0 2021-10-01 18:30:28 +02:00
lassulus
9998f618d5 reaktor2: add comment about unicode krepel magic 2021-09-28 23:02:50 +02:00
lassulus
e151cfd329 reaktor2: add link to wiki.r for each agenda item 2021-09-28 22:41:38 +02:00
lassulus
5e951329e3 nixpkgs: b3083bc -> 6120ac5 2021-09-20 11:10:56 +02:00
Kierán Meinhardt
8a697d6897 external: refactor kmein hosts 2021-09-19 09:26:03 +02:00
lassulus
e7d5d99083 rip Reaktor 2021-09-14 20:32:51 +02:00
lassulus
eeb122aeff nixpkgs: 8b0b81d -> b3083bc 2021-09-14 14:40:26 +02:00
lassulus
7ada896289 Merge remote-tracking branch 'gum/master' 2021-09-12 12:12:45 +02:00
lassulus
85aa4aa5b3 nixpkgs: 12eb1d1 -> 8b0b81d 2021-09-12 11:56:09 +02:00
lassulus
99ad1246a4 nixpkgs-unstable: 8d8a28b -> 09cd65b 2021-09-10 13:16:02 +02:00
lassulus
61430a5c9b nixpkgs: 74d017e -> 12eb1d1 2021-09-10 13:15:42 +02:00
lassulus
9a9abc561b git-hooks irc-announce: fix tls arg 2021-09-10 09:30:46 +02:00
lassulus
68c7f79174 l echelon.r: add syncthing id 2021-09-10 09:24:12 +02:00
lassulus
b8cd625a70 l: add lasspi & domsen-pixel hosts 2021-09-10 09:23:11 +02:00
lassulus
f2287d2024 l: add mumble.lassul.us for mumble-web 2021-09-10 09:22:08 +02:00
makefu
96de4530c3
shack/powerraw: also open tcp port 11111 2021-09-09 20:40:13 +02:00
lassulus
9260452792 move shackie from puyak.r to hotdog.r 2021-09-08 16:03:38 +02:00
9cebb56981 mic92: restart realwallpaper on failure 2021-09-06 18:53:21 +02:00
lassulus
b471ff4191 irc-announce: add tls flag 2021-09-05 23:09:21 +02:00
lassulus
aaae1b2f5b hidden-ssh: fix to work with new nixos tor service 2021-09-05 23:04:05 +02:00
makefu
9202b9b33e
puyak.r glados: fix tts 2021-09-05 22:18:33 +02:00
makefu
936ebe7ac1
puyak.r: disable nonfuc unifi 2021-09-05 21:54:30 +02:00
makefu
e0c5b3f187
puyak.r: announce doorstatus 2021-09-05 21:52:47 +02:00