409 commits

Author	SHA1	Message	Date
Charlotte 🦝 Delenk	34254d2dfb	create the nginx cache	2022-04-28 08:43:02 +01:00
Charlotte 🦝 Delenk	db3e7f798b	disable mail filtering for now	2022-04-27 11:39:35 +01:00
Charlotte 🦝 Delenk	054a2bcf33	add the controller worker	2022-04-27 11:37:49 +01:00
Charlotte 🦝 Delenk	07aa518911	listen to rspamd on :11332	2022-04-27 11:30:34 +01:00
Charlotte 🦝 Delenk	70c26f615a	increase S3 timeouts as the internet is slow as molasses	2022-04-27 09:48:08 +01:00
Charlotte 🦝 Delenk	5bf783123e	oh god apparently my mail was broken	2022-04-27 09:06:17 +01:00
Charlotte 🦝 Delenk	07a4d2ad4f	upgrade to elasticsearch 7	2022-04-26 13:14:40 +01:00
Charlotte 🦝 Delenk	8d476bfcd2	fix the header situation	2022-04-26 13:06:21 +01:00
Charlotte 🦝 Delenk	7f7e30e92b	Revert "use the s3 bucket url instead" ... This reverts commit 7ee99f3317.	2022-04-26 13:01:21 +01:00
Charlotte 🦝 Delenk	828169373a	recognize nixos-8gb-fsn1-1 as a reverse proxy	2022-04-26 12:58:51 +01:00
Charlotte 🦝 Delenk	d3c0d0f8b6	don’t use a named locations block	2022-04-26 12:57:13 +01:00
Charlotte 🦝 Delenk	7ee99f3317	use the s3 bucket url instead	2022-04-26 12:54:50 +01:00
Charlotte 🦝 Delenk	9dc9b308a4	fix the proxy pass destination	2022-04-26 12:48:49 +01:00
Charlotte 🦝 Delenk	3dcae3ab31	make the endpoint an https endpoint	2022-04-26 12:34:53 +01:00
Charlotte 🦝 Delenk	d8308e0769	add mastodon webfinger	2022-04-26 12:31:59 +01:00
Charlotte 🦝 Delenk	ae20e740f1	set s3_endpoint	2022-04-26 12:30:00 +01:00
Charlotte 🦝 Delenk	338e127d68	fix nginx config	2022-04-26 10:03:00 +01:00
Charlotte 🦝 Delenk	adbfaf3c78	fix proxy-pass	2022-04-26 09:48:16 +01:00
Charlotte 🦝 Delenk	ed65f63452	fix eval	2022-04-26 09:45:29 +01:00
Charlotte 🦝 Delenk	e3b2559439	pass check	2022-04-26 09:44:10 +01:00
Charlotte 🦝 Delenk	3935d18c0b	correct path to the modules directory	2022-04-26 09:42:42 +01:00
Charlotte 🦝 Delenk	74f7ebdcce	host mastodon assets on a separate subdomain	2022-04-26 09:40:11 +01:00
Charlotte 🦝 Delenk	7be407a2b7	disable mastodon unix sockets	2022-04-26 09:20:21 +01:00
Charlotte 🦝 Delenk	a13cad10b1	maybe this worksk?	2022-04-26 09:10:54 +01:00
Charlotte 🦝 Delenk	c45a360ec7	have nginx access mastodon via port?	2022-04-26 08:59:53 +01:00
Charlotte 🦝 Delenk	e85a20173c	please work omg	2022-04-26 08:48:07 +01:00
Charlotte 🦝 Delenk	0b93407955	use https://mastodon.int.chir.rs/	2022-04-26 08:26:14 +01:00
Charlotte 🦝 Delenk	a2a75691c9	move shit around?	2022-04-26 08:19:57 +01:00
Charlotte 🦝 Delenk	fbc89a2314	enableSSL -> addSSL	2022-04-26 08:11:54 +01:00
Charlotte 🦝 Delenk	08c7bc67bf	connect to mastodon via http i don’t care anymore	2022-04-26 08:06:57 +01:00
Charlotte 🦝 Delenk	c42defd47b	fix stuff?	2022-04-26 07:53:03 +01:00
Charlotte 🦝 Delenk	8b11f2e04c	fix eval error*2	2022-04-26 07:36:17 +01:00
Charlotte 🦝 Delenk	e73e76a932	fix eval error	2022-04-26 07:28:34 +01:00
Charlotte 🦝 Delenk	400315012d	add a mastodon.int.chir.rs	2022-04-26 07:26:16 +01:00
Charlotte 🦝 Delenk	ec0daf01dd	fuck around with the dns until it works	2022-04-26 07:19:59 +01:00
Charlotte 🦝 Delenk	ce9e828a85	increase the priority of localhost as build-pc isn’t always online	2022-04-26 07:12:17 +01:00
Charlotte 🦝 Delenk	3562b07970	please work?	2022-04-26 07:09:56 +01:00
Charlotte 🦝 Delenk	1aa1ce515a	oh oops	2022-04-25 21:14:55 +01:00
Charlotte 🦝 Delenk	1bbecc65d8	set the proxy header?	2022-04-25 21:07:39 +01:00
Charlotte 🦝 Delenk	e505caface	redis.mastodon -> redis.servers.mastodon	2022-04-25 19:22:16 +01:00
Charlotte 🦝 Delenk	b4f88658e4	fix bug in the mastodon module	2022-04-25 19:09:27 +01:00
Charlotte 🦝 Delenk	2e376a8c18	add redis extra config	2022-04-25 18:01:55 +01:00
Charlotte 🦝 Delenk	1202604cbc	add mastodon reverse-proxy	2022-04-25 17:57:59 +01:00
Charlotte 🦝 Delenk	2d03f310b9	config.secrets → config.sops.secrets	2022-04-25 17:51:59 +01:00
Charlotte 🦝 Delenk	15328ab025	add nginx vhost	2022-04-25 17:51:59 +01:00
Charlotte 🦝 Delenk	66dc646d02	add mastodon	2022-04-25 17:47:59 +01:00
Charlotte 🦝 Delenk	877bef3dbc	fix some stuff	2022-04-25 09:49:32 +01:00
Charlotte 🦝 Delenk	c4121a6b58	use backblaze again	2022-04-25 09:15:24 +01:00
Charlotte 🦝 Delenk	acf026d5f0	pass hydra.chir.rs to nas.int.chir.rs	2022-04-25 08:42:57 +01:00
Charlotte 🦝 Delenk	b2eb3a2844	do the correct thing (utf8 ssid)	2022-04-24 22:05:35 +01:00
Charlotte 🦝 Delenk	64c290bbfd	forgot to enable hostapd	2022-04-24 22:01:17 +01:00
Charlotte 🦝 Delenk	0e17a59abb	make the cache key a secret	2022-04-24 21:54:48 +01:00
Charlotte 🦝 Delenk	f7b1c750aa	add hostapd support	2022-04-24 21:20:53 +01:00
Charlotte 🦝 Delenk	6e95290303	Track node_exporter for the nas	2022-04-24 16:10:12 +01:00
Charlotte 🦝 Delenk	6b6d7281e0	Add a backups group	2022-04-24 13:14:47 +01:00
Charlotte 🦝 Delenk	102234539e	fix eval for nas	2022-04-24 13:12:12 +01:00
Charlotte 🦝 Delenk	1c39d0ccf1	Add host keys for initrd ssh	2022-04-24 09:50:26 +01:00
Charlotte 🦝 Delenk	3cbb1e3024	Add ssh access in initrd	2022-04-24 09:43:57 +01:00
Charlotte 🦝 Delenk	80544d5c7c	add the most basic-ass rspamd config possible	2022-04-21 08:47:28 +01:00
Charlotte 🦝 Delenk	4e0152ba06	Re-add hydra.int.chir.rs. ... This is because there is no reason for me to be accessing hydra over my publically accessible server and be limited to maybe 100kB/s	2022-04-20 09:24:42 +01:00
Charlotte 🦝 Delenk	529ade54ea	use nutty-noon.int.chir.rs instead of the removed hydra.int.chir.rs	2022-04-17 09:59:59 +01:00
Charlotte 🦝 Delenk	74ddd61227	Enable autofetch ... this is because the constant authorization spam is no longer an issue	2022-04-16 20:37:58 +01:00
Charlotte 🦝 Delenk	5d75d2fca8	Allow static.darkkirb.de	2022-04-16 13:23:59 +01:00
Charlotte 🦝 Delenk	bcfa70d341	fix the allowed uris list	2022-04-16 12:04:10 +01:00
Charlotte 🦝 Delenk	034a6f7046	remove superseeded autodeploy	2022-04-15 19:34:35 +01:00
Charlotte 🦝 Delenk	ffdc2b4059	The github token needs Bearer apparently	2022-04-15 18:48:34 +01:00
Charlotte 🦝 Delenk	22cdfc034d	fix github username	2022-04-15 18:48:33 +01:00
Charlotte 🦝 Delenk	2106e4b847	remove superseeded nix-cache	2022-04-15 18:48:32 +01:00
Charlotte 🦝 Delenk	5e8fc3cce9	now	2022-04-15 09:59:11 +01:00
Charlotte 🦝 Delenk	9afa666c9f	please	2022-04-15 09:54:28 +01:00
Charlotte 🦝 Delenk	61e545a979	???	2022-04-15 09:49:48 +01:00
Charlotte 🦝 Delenk	55b9ef55e2	set host to proxy host when reverse-proxying	2022-04-15 09:36:46 +01:00
Charlotte 🦝 Delenk	d56b8c4e11	try to publish hydra	2022-04-15 09:28:02 +01:00
Charlotte 🦝 Delenk	f9efdc24c3	Add githubstatus reporting	2022-04-15 09:12:37 +01:00
Charlotte 🦝 Delenk	eebea1e3de	use more agressive compression options	2022-04-14 06:29:42 +01:00
Charlotte 🦝 Delenk	a18cafdc94	Upload to backblaze	2022-04-13 13:39:43 +01:00
Charlotte 🦝 Delenk	7d72b3662e	Use aws credentials	2022-04-13 13:39:43 +01:00
Charlotte 🦝 Delenk	0d7c79d659	Add signing for nix-serve once again	2022-04-12 13:18:20 +01:00
Charlotte 🦝 Delenk	d11f5975fa	Don’t upload hydra results to s3	2022-04-12 10:38:53 +01:00
Charlotte 🦝 Delenk	1c5dd90edc	remove signing once again	2022-04-12 10:37:45 +01:00
Charlotte 🦝 Delenk	a815c86cd1	remove owner for nix-serve secret	2022-04-12 10:35:14 +01:00
Charlotte 🦝 Delenk	01ae3eaa04	add nix-serve signing	2022-04-12 10:34:04 +01:00
Charlotte 🦝 Delenk	4b84f6f241	add missing lib	2022-04-12 09:00:35 +01:00
Charlotte 🦝 Delenk	ed25df7369	add nix-serve	2022-04-12 08:56:19 +01:00
Charlotte 🦝 Delenk	74843e79de	add github_token	2022-04-10 13:08:05 +01:00
Charlotte 🦝 Delenk	1117e2b2ab	set buffer size to maximum?	2022-04-09 12:26:09 +01:00
Charlotte 🦝 Delenk	61ce2cdffc	add some rt stuff	2022-04-09 12:22:14 +01:00
Charlotte 🦝 Delenk	b851765359	fix username and uuid	2022-04-01 19:05:29 +01:00
Charlotte 🦝 Delenk	7ce6d30cfe	feat: Move over the darkkirb.de zone	2022-03-20 10:13:37 +01:00
Charlotte 🦝 Delenk	989285330f	fix: Make the clean-s3-cache timer actually work	2022-03-20 07:49:22 +01:00
Charlotte 🦝 Delenk	fe438e8a90	feat: Add neo-layout git to allowed URIs ... this is for the rewrite	2022-03-19 20:05:04 +01:00
Charlotte 🦝 Delenk	9edb1dd015	feat: Add cache cleanup script ... This fixes #77	2022-03-16 20:35:15 +01:00
Charlotte 🦝 Delenk	303ec1e4a9	feat: Add rpz.int.chir.rs zone ... fix #68	2022-03-12 22:04:01 +01:00
Charlotte 🦝 Delenk	e5406d318f	fix: Use the main dns server instead of the copy ... fix #67	2022-03-12 13:41:22 +01:00
Charlotte 🦝 Delenk	9f73713f4e	Revert "fix: Allow the dns tkey for darkkirb.de" ... This reverts commit 60373d3042.	2022-03-12 13:39:19 +01:00
Charlotte 🦝 Delenk	60373d3042	fix: Allow the dns tkey for darkkirb.de ... fix #67	2022-03-12 11:25:56 +01:00
Charlotte 🦝 Delenk	eb0042cd81	feat: Expose hydra to the local network ... fix #64	2022-03-12 10:45:11 +01:00
Charlotte 🦝 Delenk	097ff2d4b6	feat: Do hydra builds against the cache directly ... Also adds automated signing fix #52	2022-03-08 20:18:16 +01:00
Charlotte 🦝 Delenk	b2bfe70b64	fix: disable the derivation size limit in hydra ... fix #51	2022-03-08 19:52:55 +01:00
Charlotte 🦝 Delenk	2e60e56bd3	fix: Increase hydra limits ... fix #51	2022-03-08 18:40:01 +01:00
Charlotte 🦝 Delenk	7cd30c7b06	fix: Remove home protections for nginx ... fix #46	2022-03-06 21:44:43 +01:00
Charlotte 🦝 Delenk	ea38329dad	fix: Add acme cert for miifox ... I thought this was automatic fix #45	2022-03-06 21:34:23 +01:00
Charlotte 🦝 Delenk	b37c784d10	feat: Move the int.chir.rs zone to nix ... fix #43	2022-03-06 18:26:20 +01:00
Charlotte 🦝 Delenk	86336e637f	fix: Allow phpfpm to access dovecot pw ... fix #41	2022-03-06 14:43:10 +01:00
Charlotte 🦝 Delenk	53607ccfc2	fix: Pass config file instead of config ... fix #38	2022-03-06 12:05:23 +01:00
Charlotte 🦝 Delenk	2bf4e84d27	fix: Missed the first argument to toYAML ... fix #37	2022-03-06 11:50:56 +01:00
Charlotte 🦝 Delenk	1729cd7957	fix: Use promtail config instead of deleted file ... fix #36	2022-03-06 11:46:06 +01:00
Charlotte 🦝 Delenk	22c5ff7adc	fix: Make loki work with multiple systems ... fix #35	2022-03-06 11:44:08 +01:00
Charlotte 🦝 Delenk	1f866df312	Revert "Disable Multiverse for now" ... This reverts commit 90adb79e6b.	2022-03-05 17:57:00 +01:00
Charlotte 🦝 Delenk	a1bcc25c83	enable multipart upload?	2022-03-03 19:41:23 +01:00
Charlotte 🦝 Delenk	205f452250	Sign and upload to the new cache	2022-03-03 10:21:01 +01:00
Charlotte 🦝 Delenk	3ea92074e8	make the cache internal-only	2022-03-02 21:36:18 +01:00
Charlotte 🦝 Delenk	d228ef73d3	Add cache storj gateway	2022-03-02 20:56:15 +01:00
Charlotte 🦝 Delenk	b397aa25e9	fix ggateway-st	2022-03-02 18:58:17 +01:00
Charlotte 🦝 Delenk	2344b78ebd	switch to storj	2022-03-02 18:34:15 +01:00
Charlotte 🦝 Delenk	19f2bdf21b	use nixFlakes instead of nixUnstable	2022-03-01 20:58:52 +01:00
Charlotte 🦝 Delenk	90adb79e6b	Disable Multiverse for now ... It appears that multiverse is extremely slow on this server	2022-03-01 20:58:42 +01:00
Charlotte 🦝 Delenk	ec331e4713	feat: allow hand-selling ... this fixes #19	2022-03-01 20:58:41 +01:00
Charlotte 🦝 Delenk	686eaec80d	feat: add essentialsx signs ... This commit fixes #17	2022-03-01 20:58:41 +01:00
Charlotte 🦝 Delenk	0ecfee5edd	disable sell command in creative mode	2022-02-24 10:45:50 +01:00
Charlotte 🦝 Delenk	d19688416f	disable gamemode bypass	2022-02-24 10:38:05 +01:00
Charlotte 🦝 Delenk	f97f515add	Add other multiverse components	2022-02-24 10:17:10 +01:00
Charlotte 🦝 Delenk	aa11729a04	Add multiverse	2022-02-24 10:00:57 +01:00
Charlotte 🦝 Delenk	d07d60ad88	move the extra session commands to the zsh extrainit	2022-02-22 08:03:12 +01:00
Charlotte 🦝 Delenk	960e259f0c	allowlist zap	2022-02-21 12:24:28 +01:00
Charlotte 🦝 Delenk	51de516846	add permissions to the default group	2022-02-21 11:48:24 +01:00
Charlotte 🦝 Delenk	589f999cd5	add worth yaml	2022-02-21 10:25:52 +01:00
Charlotte 🦝 Delenk	193892d5e0	add config for essentialsx	2022-02-21 09:39:17 +01:00
Charlotte 🦝 Delenk	9328ecedb6	Add essentialsx	2022-02-20 21:48:07 +01:00
Charlotte 🦝 Delenk	3b61bf31eb	Add vault	2022-02-20 20:14:42 +01:00
Charlotte 🦝 Delenk	a9485de722	groups -> parents	2022-02-20 18:59:24 +01:00
Charlotte 🦝 Delenk	3426f6d102	add per-user permissions	2022-02-20 18:52:34 +01:00
Charlotte 🦝 Delenk	e073319c16	listen on ipv4 only. death	2022-02-20 18:37:06 +01:00
Charlotte 🦝 Delenk	7fe4bd4e52	Add declarative group configuration	2022-02-20 18:19:39 +01:00
Charlotte 🦝 Delenk	a0f64e1be1	disable ops	2022-02-20 17:29:44 +01:00
Charlotte 🦝 Delenk	a212b63548	Add luckperms	2022-02-20 16:30:12 +01:00
Charlotte 🦝 Delenk	8cb413a221	optimize paper config	2022-02-20 12:25:45 +01:00
Charlotte 🦝 Delenk	e8ebc51228	fix the destination of copy-to-cache	2022-02-19 21:22:36 +01:00
Charlotte 🦝 Delenk	6a906d0fb9	Add whitelist entries	2022-02-19 15:37:50 +01:00
Charlotte 🦝 Delenk	40d0903093	Add minecraft	2022-02-19 15:34:43 +01:00
Charlotte 🦝 Delenk	206e911be3	force push to staging	2022-02-18 20:42:38 +01:00
Charlotte 🦝 Delenk	ab42a116e0	this was the wrong filename	2022-02-18 20:39:18 +01:00
Charlotte 🦝 Delenk	6b3db48a70	only run copy-to-cache on the hydra machine	2022-02-18 20:36:49 +01:00
Charlotte 🦝 Delenk	e558743e12	fix the nix update more	2022-02-18 20:25:57 +01:00
Charlotte 🦝 Delenk	c1615b09c5	add git to nix’s path	2022-02-18 20:17:23 +01:00
Charlotte 🦝 Delenk	749c0da8eb	add missing backslashes	2022-02-18 20:15:22 +01:00
Charlotte 🦝 Delenk	cd31b2a153	fix token name and actually add the secret	2022-02-18 20:13:36 +01:00
Charlotte 🦝 Delenk	b34479b748	fix spelling of wantedby	2022-02-18 20:07:25 +01:00
Charlotte 🦝 Delenk	91694fb6e3	Try to automatically update nixpkgs and deploy changes	2022-02-18 20:02:45 +01:00
Charlotte 🦝 Delenk	52d6aa66d0	add the sops secret	2022-02-18 17:04:53 +01:00