Commit graph

480 commits

Author SHA1 Message Date
ee4f05d0f9
use local connection for postgresql 2022-04-29 20:52:22 +01:00
8adb47cede
it’s disable not disabled 2022-04-29 20:48:08 +01:00
bed795ee18
disable sslmode for local connection 2022-04-29 20:06:46 +01:00
c846546663
use go 1.16 and don’t do this random patch 2022-04-29 19:09:55 +01:00
694265b34d
fix quotes in the preStart script 2022-04-29 17:46:43 +01:00
33c3a7990f
fix overlapping names 2022-04-29 17:42:18 +01:00
c82c136e94
it’s writeText not writeFile 2022-04-29 17:38:47 +01:00
1d545cbc36
Add matrix-media-repo 2022-04-29 17:34:12 +01:00
025f0c5d20
remove old, useless configuration 2022-04-29 17:34:11 +01:00
7d90e8807a
protect the controller with a password 2022-04-29 14:28:35 +01:00
ce98e79865
fix the name (proxy -> rspamd_proxy) 2022-04-29 14:25:42 +01:00
823efaae44
use the proxy worker 2022-04-29 14:23:45 +01:00
4ec4924548
Wildly misleading documentation is my favourite
Apparently UCL is *NOT* JSON-compatible no matter what the documentation claims.
2022-04-29 14:13:20 +01:00
ca9c15b1b4
disable neural_gorup.conf temporarily 2022-04-29 14:02:10 +01:00
1185c485a5
services.redis.rspamd -> services.redis.servers.rspamd 2022-04-28 21:25:32 +01:00
5decac7cbf
integrate rspamd with postfix 2022-04-28 21:20:28 +01:00
c5028ed6a0
and rspamd config 2022-04-28 21:20:28 +01:00
dd980613e9
enable redis for rspamd 2022-04-28 21:20:27 +01:00
91b0e8d037
Move rspamd to nas 2022-04-28 21:20:23 +01:00
7ae3c6478f
disable config checking 2022-04-28 18:51:20 +01:00
5c1dd13503
reduce multipart size to 5MiB
Otherwise the uploads will fail because the internet is just this slow for my mastodon instance lmao
2022-04-28 08:43:02 +01:00
34254d2dfb
create the nginx cache 2022-04-28 08:43:02 +01:00
db3e7f798b
disable mail filtering for now 2022-04-27 11:39:35 +01:00
054a2bcf33
add the controller worker 2022-04-27 11:37:49 +01:00
07aa518911
listen to rspamd on :11332 2022-04-27 11:30:34 +01:00
70c26f615a
increase S3 timeouts as the internet is slow as molasses 2022-04-27 09:48:08 +01:00
5bf783123e
oh god apparently my mail was broken 2022-04-27 09:06:17 +01:00
07a4d2ad4f
upgrade to elasticsearch 7 2022-04-26 13:14:40 +01:00
8d476bfcd2
fix the header situation 2022-04-26 13:06:21 +01:00
7f7e30e92b
Revert "use the s3 bucket url instead"
This reverts commit 7ee99f3317.
2022-04-26 13:01:21 +01:00
828169373a
recognize nixos-8gb-fsn1-1 as a reverse proxy 2022-04-26 12:58:51 +01:00
d3c0d0f8b6
don’t use a named locations block 2022-04-26 12:57:13 +01:00
7ee99f3317
use the s3 bucket url instead 2022-04-26 12:54:50 +01:00
9dc9b308a4
fix the proxy pass destination 2022-04-26 12:48:49 +01:00
3dcae3ab31
make the endpoint an https endpoint 2022-04-26 12:34:53 +01:00
d8308e0769
add mastodon webfinger 2022-04-26 12:31:59 +01:00
ae20e740f1
set s3_endpoint 2022-04-26 12:30:00 +01:00
338e127d68
fix nginx config 2022-04-26 10:03:00 +01:00
adbfaf3c78
fix proxy-pass 2022-04-26 09:48:16 +01:00
ed65f63452
fix eval 2022-04-26 09:45:29 +01:00
e3b2559439
pass check 2022-04-26 09:44:10 +01:00
3935d18c0b
correct path to the modules directory 2022-04-26 09:42:42 +01:00
74f7ebdcce
host mastodon assets on a separate subdomain 2022-04-26 09:40:11 +01:00
7be407a2b7
disable mastodon unix sockets 2022-04-26 09:20:21 +01:00
a13cad10b1
maybe this worksk? 2022-04-26 09:10:54 +01:00
c45a360ec7
have nginx access mastodon via port? 2022-04-26 08:59:53 +01:00
e85a20173c
please work omg 2022-04-26 08:48:07 +01:00
0b93407955
use https://mastodon.int.chir.rs/ 2022-04-26 08:26:14 +01:00
a2a75691c9
move shit around? 2022-04-26 08:19:57 +01:00
fbc89a2314
enableSSL -> addSSL 2022-04-26 08:11:54 +01:00
08c7bc67bf
connect to mastodon via http i don’t care anymore 2022-04-26 08:06:57 +01:00
c42defd47b
fix stuff? 2022-04-26 07:53:03 +01:00
8b11f2e04c
fix eval error*2 2022-04-26 07:36:17 +01:00
e73e76a932
fix eval error 2022-04-26 07:28:34 +01:00
400315012d
add a mastodon.int.chir.rs 2022-04-26 07:26:16 +01:00
ec0daf01dd
fuck around with the dns until it works 2022-04-26 07:19:59 +01:00
ce9e828a85
increase the priority of localhost as build-pc isn’t always online 2022-04-26 07:12:17 +01:00
3562b07970
please work? 2022-04-26 07:09:56 +01:00
1aa1ce515a
oh oops 2022-04-25 21:14:55 +01:00
1bbecc65d8
set the proxy header? 2022-04-25 21:07:39 +01:00
e505caface
redis.mastodon -> redis.servers.mastodon 2022-04-25 19:22:16 +01:00
b4f88658e4
fix bug in the mastodon module 2022-04-25 19:09:27 +01:00
2e376a8c18
add redis extra config 2022-04-25 18:01:55 +01:00
1202604cbc
add mastodon reverse-proxy 2022-04-25 17:57:59 +01:00
2d03f310b9
config.secrets → config.sops.secrets 2022-04-25 17:51:59 +01:00
15328ab025
add nginx vhost 2022-04-25 17:51:59 +01:00
66dc646d02
add mastodon 2022-04-25 17:47:59 +01:00
877bef3dbc
fix some stuff 2022-04-25 09:49:32 +01:00
c4121a6b58
use backblaze again 2022-04-25 09:15:24 +01:00
acf026d5f0
pass hydra.chir.rs to nas.int.chir.rs 2022-04-25 08:42:57 +01:00
b2eb3a2844
do the correct thing (utf8 ssid) 2022-04-24 22:05:35 +01:00
64c290bbfd
forgot to enable hostapd 2022-04-24 22:01:17 +01:00
0e17a59abb
make the cache key a secret 2022-04-24 21:54:48 +01:00
f7b1c750aa
add hostapd support 2022-04-24 21:20:53 +01:00
6e95290303
Track node_exporter for the nas 2022-04-24 16:10:12 +01:00
6b6d7281e0
Add a backups group 2022-04-24 13:14:47 +01:00
102234539e
fix eval for nas 2022-04-24 13:12:12 +01:00
1c39d0ccf1
Add host keys for initrd ssh 2022-04-24 09:50:26 +01:00
3cbb1e3024
Add ssh access in initrd 2022-04-24 09:43:57 +01:00
80544d5c7c
add the most basic-ass rspamd config possible 2022-04-21 08:47:28 +01:00
4e0152ba06
Re-add hydra.int.chir.rs.
This is because there is no reason for me to be accessing hydra over my
publically accessible server and be limited to maybe 100kB/s
2022-04-20 09:24:42 +01:00
529ade54ea
use nutty-noon.int.chir.rs instead of the removed hydra.int.chir.rs 2022-04-17 09:59:59 +01:00
74ddd61227
Enable autofetch
this is because the constant authorization spam is no longer an issue
2022-04-16 20:37:58 +01:00
5d75d2fca8
Allow static.darkkirb.de 2022-04-16 13:23:59 +01:00
bcfa70d341
fix the allowed uris list 2022-04-16 12:04:10 +01:00
034a6f7046
remove superseeded autodeploy 2022-04-15 19:34:35 +01:00
ffdc2b4059
The github token needs Bearer apparently 2022-04-15 18:48:34 +01:00
22cdfc034d
fix github username 2022-04-15 18:48:33 +01:00
2106e4b847
remove superseeded nix-cache 2022-04-15 18:48:32 +01:00
5e8fc3cce9
now 2022-04-15 09:59:11 +01:00
9afa666c9f
please 2022-04-15 09:54:28 +01:00
61e545a979
??? 2022-04-15 09:49:48 +01:00
55b9ef55e2
set host to proxy host when reverse-proxying 2022-04-15 09:36:46 +01:00
d56b8c4e11
try to publish hydra 2022-04-15 09:28:02 +01:00
f9efdc24c3
Add githubstatus reporting 2022-04-15 09:12:37 +01:00
eebea1e3de
use more agressive compression options 2022-04-14 06:29:42 +01:00
a18cafdc94
Upload to backblaze 2022-04-13 13:39:43 +01:00
7d72b3662e
Use aws credentials 2022-04-13 13:39:43 +01:00
0d7c79d659
Add signing for nix-serve once again 2022-04-12 13:18:20 +01:00
d11f5975fa
Don’t upload hydra results to s3 2022-04-12 10:38:53 +01:00
1c5dd90edc
remove signing once again 2022-04-12 10:37:45 +01:00
a815c86cd1
remove owner for nix-serve secret 2022-04-12 10:35:14 +01:00
01ae3eaa04
add nix-serve signing 2022-04-12 10:34:04 +01:00
4b84f6f241
add missing lib 2022-04-12 09:00:35 +01:00
ed25df7369
add nix-serve 2022-04-12 08:56:19 +01:00
74843e79de
add github_token 2022-04-10 13:08:05 +01:00
1117e2b2ab
set buffer size to maximum? 2022-04-09 12:26:09 +01:00
61ce2cdffc
add some rt stuff 2022-04-09 12:22:14 +01:00
b851765359
fix username and uuid 2022-04-01 19:05:29 +01:00
7ce6d30cfe
feat: Move over the darkkirb.de zone 2022-03-20 10:13:37 +01:00
989285330f
fix: Make the clean-s3-cache timer actually work 2022-03-20 07:49:22 +01:00
fe438e8a90
feat: Add neo-layout git to allowed URIs
this is for the rewrite
2022-03-19 20:05:04 +01:00
9edb1dd015
feat: Add cache cleanup script
This fixes #77
2022-03-16 20:35:15 +01:00
303ec1e4a9
feat: Add rpz.int.chir.rs zone
fix #68
2022-03-12 22:04:01 +01:00
e5406d318f
fix: Use the main dns server instead of the copy
fix #67
2022-03-12 13:41:22 +01:00
9f73713f4e
Revert "fix: Allow the dns tkey for darkkirb.de"
This reverts commit 60373d3042.
2022-03-12 13:39:19 +01:00
60373d3042
fix: Allow the dns tkey for darkkirb.de
fix #67
2022-03-12 11:25:56 +01:00
eb0042cd81
feat: Expose hydra to the local network
fix #64
2022-03-12 10:45:11 +01:00
097ff2d4b6
feat: Do hydra builds against the cache directly
Also adds automated signing

fix #52
2022-03-08 20:18:16 +01:00
b2bfe70b64
fix: disable the derivation size limit in hydra
fix #51
2022-03-08 19:52:55 +01:00
2e60e56bd3
fix: Increase hydra limits
fix #51
2022-03-08 18:40:01 +01:00
7cd30c7b06
fix: Remove home protections for nginx
fix #46
2022-03-06 21:44:43 +01:00
ea38329dad
fix: Add acme cert for miifox
I thought this was automatic

fix #45
2022-03-06 21:34:23 +01:00
b37c784d10
feat: Move the int.chir.rs zone to nix
fix #43
2022-03-06 18:26:20 +01:00
86336e637f
fix: Allow phpfpm to access dovecot pw
fix #41
2022-03-06 14:43:10 +01:00
53607ccfc2
fix: Pass config file instead of config
fix #38
2022-03-06 12:05:23 +01:00
2bf4e84d27
fix: Missed the first argument to toYAML
fix #37
2022-03-06 11:50:56 +01:00
1729cd7957
fix: Use promtail config instead of deleted file
fix #36
2022-03-06 11:46:06 +01:00
22c5ff7adc
fix: Make loki work with multiple systems
fix #35
2022-03-06 11:44:08 +01:00
1f866df312
Revert "Disable Multiverse for now"
This reverts commit 90adb79e6b.
2022-03-05 17:57:00 +01:00
a1bcc25c83
enable multipart upload? 2022-03-03 19:41:23 +01:00
205f452250
Sign and upload to the new cache 2022-03-03 10:21:01 +01:00
3ea92074e8
make the cache internal-only 2022-03-02 21:36:18 +01:00
d228ef73d3
Add cache storj gateway 2022-03-02 20:56:15 +01:00
b397aa25e9
fix ggateway-st 2022-03-02 18:58:17 +01:00
2344b78ebd
switch to storj 2022-03-02 18:34:15 +01:00
19f2bdf21b
use nixFlakes instead of nixUnstable 2022-03-01 20:58:52 +01:00
90adb79e6b
Disable Multiverse for now
It appears that multiverse is extremely slow on this server
2022-03-01 20:58:42 +01:00
ec331e4713
feat: allow hand-selling
this fixes #19
2022-03-01 20:58:41 +01:00
686eaec80d
feat: add essentialsx signs
This commit fixes #17
2022-03-01 20:58:41 +01:00
0ecfee5edd
disable sell command in creative mode 2022-02-24 10:45:50 +01:00
d19688416f
disable gamemode bypass 2022-02-24 10:38:05 +01:00
f97f515add
Add other multiverse components 2022-02-24 10:17:10 +01:00
aa11729a04
Add multiverse 2022-02-24 10:00:57 +01:00
d07d60ad88
move the extra session commands to the zsh extrainit 2022-02-22 08:03:12 +01:00
960e259f0c
allowlist zap 2022-02-21 12:24:28 +01:00
51de516846
add permissions to the default group 2022-02-21 11:48:24 +01:00
589f999cd5
add worth yaml 2022-02-21 10:25:52 +01:00
193892d5e0
add config for essentialsx 2022-02-21 09:39:17 +01:00
9328ecedb6
Add essentialsx 2022-02-20 21:48:07 +01:00
3b61bf31eb
Add vault 2022-02-20 20:14:42 +01:00
a9485de722
groups -> parents 2022-02-20 18:59:24 +01:00
3426f6d102
add per-user permissions 2022-02-20 18:52:34 +01:00
e073319c16
listen on ipv4 only. death 2022-02-20 18:37:06 +01:00
7fe4bd4e52
Add declarative group configuration 2022-02-20 18:19:39 +01:00
a0f64e1be1
disable ops 2022-02-20 17:29:44 +01:00
a212b63548
Add luckperms 2022-02-20 16:30:12 +01:00
8cb413a221
optimize paper config 2022-02-20 12:25:45 +01:00
e8ebc51228
fix the destination of copy-to-cache 2022-02-19 21:22:36 +01:00
6a906d0fb9
Add whitelist entries 2022-02-19 15:37:50 +01:00
40d0903093
Add minecraft 2022-02-19 15:34:43 +01:00
206e911be3
force push to staging 2022-02-18 20:42:38 +01:00
ab42a116e0
this was the wrong filename 2022-02-18 20:39:18 +01:00
6b3db48a70
only run copy-to-cache on the hydra machine 2022-02-18 20:36:49 +01:00
e558743e12
fix the nix update more 2022-02-18 20:25:57 +01:00
c1615b09c5
add git to nix’s path 2022-02-18 20:17:23 +01:00
749c0da8eb
add missing backslashes 2022-02-18 20:15:22 +01:00
cd31b2a153
fix token name and actually add the secret 2022-02-18 20:13:36 +01:00
b34479b748
fix spelling of wantedby 2022-02-18 20:07:25 +01:00
91694fb6e3
Try to automatically update nixpkgs and deploy changes 2022-02-18 20:02:45 +01:00
52d6aa66d0
add the sops secret 2022-02-18 17:04:53 +01:00
2786ac8c6e
add gitea_authorization to hydra 2022-02-18 16:58:36 +01:00
de97b88b88
add minio access 2022-02-18 16:28:32 +01:00
989a6a4808
Allow github and git.chir.rs as sources 2022-02-18 16:26:27 +01:00
332157f210
Use hydra substites 2022-02-18 15:56:22 +01:00
530b903d52
Add hydra to my pc 2022-02-18 15:49:37 +01:00
7843d6b729
Remove need for nixpkgs fork 2022-02-18 14:17:35 +01:00
39deacbb28
remove the QUIC-Status header 2022-02-09 15:45:13 +01:00
d06baee6f1
Advertise quic 2022-02-09 15:38:35 +01:00
b9f6a8a11b
Manually add http3 config 2022-02-09 15:35:39 +01:00
388afba8de
deploy http3 2022-02-09 15:24:07 +01:00
ffee2ace01
permit transfer for old server 2022-02-09 14:21:33 +01:00
ab53a009d8
remove the sieve script ?? 2022-02-09 13:19:49 +01:00
17396de9d0
please just deliver mail jfc 2022-02-09 11:23:39 +01:00
4e826c8143
only allow mail user 2022-02-09 11:22:21 +01:00
feff4b5e79
add pigeonhole 2022-02-09 11:20:46 +01:00
46215e0a69
hopefully get sieve working??? 2022-02-09 11:03:51 +01:00
800fa211d0
hopefully get sieve working? 2022-02-09 11:01:10 +01:00
a27b3adcdb
add missing semicolon 2022-02-09 09:54:55 +01:00
62c4f1ac0a
make named-keys owned by named 2022-02-09 09:51:04 +01:00
dcfd955e57
move chir.rs zone to the server 2022-02-09 09:47:35 +01:00
92345030cc
add ksk and zsk, fix the file names, etc 2022-02-09 09:27:19 +01:00
2f1e842fe4
Add authorative zones hopefully 2022-02-08 22:01:33 +01:00
f396a1e101
Disable gitea dump
This fixes #1
2022-02-08 09:48:06 +01:00
1003e33c38
Add swayidle 2022-02-02 20:12:21 +01:00
9381c2ef59
fix secrets path 2022-01-30 14:09:25 +01:00
afeb3fc9b5
Make gitea secret owned by gitea 2022-01-30 13:59:46 +01:00
16bed46a9a
Purify the config 2022-01-30 13:50:23 +01:00
83eee6a35a
Add more power savings settings for thonkpad 2022-01-29 18:29:54 +01:00
6603fc2bb9
add thinkpad to the thinkpad secret file 2022-01-29 17:24:31 +01:00