|
63868eb38c
|
reload services after certificate updates
|
2022-05-24 10:15:11 +01:00 |
|
|
086d2aa7cd
|
remove superfluous dns2 secret
|
2022-05-24 10:10:55 +01:00 |
|
|
d2c1762442
|
set acme challenge path explicitely
|
2022-05-24 09:58:12 +01:00 |
|
|
86bc19fe8a
|
discord is wrapped
|
2022-05-21 19:44:00 +01:00 |
|
|
2f4985d4e6
|
maybe fix discord sound
|
2022-05-17 20:21:09 +01:00 |
|
|
139d30f8aa
|
apparently it switched to nixpkgs hydra wtf
|
2022-05-16 13:07:54 +01:00 |
|
|
adce436b0d
|
unblock port 22000
|
2022-05-12 08:56:29 +01:00 |
|
|
a44b57b689
|
set gui address
|
2022-05-12 08:46:29 +01:00 |
|
|
a0f985cfe6
|
Fix syncthing config
|
2022-05-12 08:43:51 +01:00 |
|
|
a84c75b7e2
|
Expose syncthing to wireguard
|
2022-05-12 08:29:01 +01:00 |
|
|
8066e7a3ac
|
Add firewall config for kde connect
|
2022-05-12 08:07:38 +01:00 |
|
|
b6c95b1d9e
|
it’s plasma5
|
2022-05-11 12:56:36 +01:00 |
|
|
a7cfe2f863
|
re-enable plasma
|
2022-05-11 12:54:32 +01:00 |
|
|
3bb37f0b62
|
fix OnBootSec and OnUnitActiveSec
|
2022-05-11 08:57:15 +01:00 |
|
|
6b6ffcb1c2
|
Switch to KDE
|
2022-05-11 07:56:55 +01:00 |
|
|
6136a45bcc
|
update stuff
|
2022-05-09 19:48:03 +01:00 |
|
|
8418449d26
|
i take it back lol
|
2022-05-07 15:45:03 +01:00 |
|
|
489397e635
|
Make the ap work for the switch?
|
2022-05-07 15:37:07 +01:00 |
|
|
fa80cb116c
|
the switch hates utf8 ssids :(
|
2022-05-07 15:22:03 +01:00 |
|
|
33f7f23498
|
Allow logging into the backup user
|
2022-05-07 10:12:36 +01:00 |
|
|
dc55037b57
|
make the backup user accessible
|
2022-05-06 16:04:09 +01:00 |
|
|
d630ed5a8b
|
Add backup stuff
|
2022-05-06 14:53:36 +01:00 |
|
|
d640573b6e
|
Add syncthing
|
2022-05-06 14:53:35 +01:00 |
|
|
36fce11a53
|
fix some skill issues
|
2022-05-05 21:26:49 +01:00 |
|
|
d4e29cd6f0
|
one weird trick to circumvent network filtering set up by people that haven’t used a computer in 20 years
|
2022-05-05 21:04:52 +01:00 |
|
|
02d00bd4a5
|
make my nas a router
|
2022-05-05 20:58:50 +01:00 |
|
|
56347e60d3
|
add mautrix-signal
|
2022-05-03 21:37:31 +01:00 |
|
|
0566e5c6ce
|
add mautrix-whatsapp
|
2022-05-03 20:25:50 +01:00 |
|
|
33e8f90a2c
|
fix matrix-media-repo metricks listener
|
2022-05-03 16:11:16 +01:00 |
|
|
c44472dcee
|
actually expose the postgres exporter
|
2022-05-03 15:31:20 +01:00 |
|
|
9ee58bae40
|
synapse does not like ipv6 addresses'
|
2022-05-03 15:23:05 +01:00 |
|
|
d290548781
|
remove tls for the metric port
|
2022-05-03 15:05:00 +01:00 |
|
|
2f861840a6
|
fix up all the metrics
|
2022-05-03 10:33:47 +01:00 |
|
|
90426985e2
|
Only remove /run/hydra-machines if nutty-noon.int.chir.rs is down
|
2022-05-03 06:56:11 +01:00 |
|
|
7ff84a9b3c
|
enable postgresql stat statements
|
2022-05-02 10:48:06 +01:00 |
|
|
89eb309195
|
async media is not supported
|
2022-05-01 16:01:26 +01:00 |
|
|
15caa9f5b9
|
enable tls 1.2 bc of federation
|
2022-05-01 12:30:57 +01:00 |
|
|
a7679c7caf
|
async media does not work ?
|
2022-05-01 08:44:28 +01:00 |
|
|
3112c39664
|
re-enable this nonsense again
|
2022-05-01 08:35:58 +01:00 |
|
|
8f696ead70
|
Did you know that nix offers no way to set the collation and ctype of a database on init? now you know
|
2022-05-01 08:29:26 +01:00 |
|
|
6e984b3d97
|
thanks synapse very cool
|
2022-05-01 08:27:43 +01:00 |
|
|
b2cf4e6232
|
remove fix synapse permissions script
|
2022-05-01 08:08:22 +01:00 |
|
|
6f32149a9a
|
add reverse-proxy entry for matrix
|
2022-05-01 08:04:58 +01:00 |
|
|
5238416bf9
|
correct user
|
2022-05-01 08:02:10 +01:00 |
|
|
a2a6f12335
|
wrong database name
|
2022-05-01 07:59:51 +01:00 |
|
|
4bc48badd3
|
switch to synapse
|
2022-05-01 07:50:18 +01:00 |
|
|
4a995c9566
|
these values were a mistake
|
2022-05-01 06:49:22 +01:00 |
|
|
2910cf0f94
|
dendrite unfortunately does not support encryption for appservices :(
|
2022-04-30 22:20:56 +01:00 |
|
|
fc7d25ab91
|
the fuck is going on
|
2022-04-30 22:18:44 +01:00 |
|
|
dfcc1a4700
|
bruh what
|
2022-04-30 22:15:10 +01:00 |
|
|
e53551313b
|
add device database
|
2022-04-30 22:00:30 +01:00 |
|
|
c1a1fd3b72
|
this was an oopsie
|
2022-04-30 21:51:30 +01:00 |
|
|
7f40fbc849
|
fix dendrite config
|
2022-04-30 21:41:12 +01:00 |
|
|
5e450524f2
|
fix address for application server?
|
2022-04-30 21:38:37 +01:00 |
|
|
031325d74c
|
remove double_puppet_server_map
|
2022-04-30 21:32:50 +01:00 |
|
|
ca18054357
|
oh ffs
|
2022-04-30 21:13:46 +01:00 |
|
|
3e94edd840
|
stop the dynamicuser nonsense
|
2022-04-30 21:10:45 +01:00 |
|
|
e66c0233be
|
remove superfluous config
|
2022-04-30 21:05:59 +01:00 |
|
|
c80d7995f0
|
meant webm to be a string
|
2022-04-30 21:03:28 +01:00 |
|
|
6419883aa9
|
as_token -> hs_token
|
2022-04-30 21:01:19 +01:00 |
|
|
3c3c98cf12
|
add mautrix-telegram
|
2022-04-30 20:57:57 +01:00 |
|
|
3d641d454b
|
correct the nginx cache path
|
2022-04-30 20:32:28 +01:00 |
|
|
7625fea1e9
|
don’t use the standard mastodon package but the imported mastodon-glitch one
|
2022-04-30 10:28:00 +01:00 |
|
|
cae19b1818
|
use mastodon-glitch
|
2022-04-30 10:23:15 +01:00 |
|
|
578111424f
|
use ping from iputils
|
2022-04-30 10:02:54 +01:00 |
|
|
791ece0391
|
ignore if hydra-machines does not exist
|
2022-04-30 10:01:29 +01:00 |
|
|
da1b3c7e9d
|
nix why does this option have two plurals
|
2022-04-30 09:43:08 +01:00 |
|
|
874b4d0280
|
fix hydra hosts
|
2022-04-30 09:39:45 +01:00 |
|
|
1ec0b04fd7
|
code had a skill issue
|
2022-04-30 09:15:58 +01:00 |
|
|
880fa1bd58
|
fix matrix-media-repo?
|
2022-04-30 09:08:21 +01:00 |
|
|
22c90930ca
|
Fix access control allow origin?
|
2022-04-30 09:02:24 +01:00 |
|
|
19b28b4a73
|
I love inconsistent configuration
|
2022-04-30 08:32:54 +01:00 |
|
|
50a50dca58
|
add matrix client discovery
|
2022-04-30 08:15:25 +01:00 |
|
|
d4d3d99b2c
|
set certificate of matrix.chir.rs
|
2022-04-29 21:55:02 +01:00 |
|
|
79571592f7
|
fix grotesque spelling of postgresql
|
2022-04-29 21:47:14 +01:00 |
|
|
c65ee43fba
|
fix database connection strings
|
2022-04-29 21:39:41 +01:00 |
|
|
302e4473f1
|
Expose matrix-dendrite
|
2022-04-29 21:35:33 +01:00 |
|
|
800dcd36ba
|
fix eval
|
2022-04-29 21:30:14 +01:00 |
|
|
d1e2a1b5cd
|
add dendrite
|
2022-04-29 21:21:31 +01:00 |
|
|
389e27d5c4
|
fucking work
|
2022-04-29 21:11:01 +01:00 |
|
|
27f45c4942
|
........
|
2022-04-29 21:04:51 +01:00 |
|
|
c439d34853
|
use underscores instead of dashes in database name
|
2022-04-29 21:03:42 +01:00 |
|
|
2d7a261c26
|
fix the postgresql config hopefully
|
2022-04-29 21:00:21 +01:00 |
|
|
ee4f05d0f9
|
use local connection for postgresql
|
2022-04-29 20:52:22 +01:00 |
|
|
8adb47cede
|
it’s disable not disabled
|
2022-04-29 20:48:08 +01:00 |
|
|
bed795ee18
|
disable sslmode for local connection
|
2022-04-29 20:06:46 +01:00 |
|
|
c846546663
|
use go 1.16 and don’t do this random patch
|
2022-04-29 19:09:55 +01:00 |
|
|
694265b34d
|
fix quotes in the preStart script
|
2022-04-29 17:46:43 +01:00 |
|
|
33c3a7990f
|
fix overlapping names
|
2022-04-29 17:42:18 +01:00 |
|
|
c82c136e94
|
it’s writeText not writeFile
|
2022-04-29 17:38:47 +01:00 |
|
|
1d545cbc36
|
Add matrix-media-repo
|
2022-04-29 17:34:12 +01:00 |
|
|
025f0c5d20
|
remove old, useless configuration
|
2022-04-29 17:34:11 +01:00 |
|
|
7d90e8807a
|
protect the controller with a password
|
2022-04-29 14:28:35 +01:00 |
|
|
ce98e79865
|
fix the name (proxy -> rspamd_proxy)
|
2022-04-29 14:25:42 +01:00 |
|
|
823efaae44
|
use the proxy worker
|
2022-04-29 14:23:45 +01:00 |
|
|
4ec4924548
|
Wildly misleading documentation is my favourite
Apparently UCL is *NOT* JSON-compatible no matter what the documentation claims.
|
2022-04-29 14:13:20 +01:00 |
|
|
ca9c15b1b4
|
disable neural_gorup.conf temporarily
|
2022-04-29 14:02:10 +01:00 |
|
|
1185c485a5
|
services.redis.rspamd -> services.redis.servers.rspamd
|
2022-04-28 21:25:32 +01:00 |
|
|
5decac7cbf
|
integrate rspamd with postfix
|
2022-04-28 21:20:28 +01:00 |
|
|
c5028ed6a0
|
and rspamd config
|
2022-04-28 21:20:28 +01:00 |
|
|
dd980613e9
|
enable redis for rspamd
|
2022-04-28 21:20:27 +01:00 |
|
|
91b0e8d037
|
Move rspamd to nas
|
2022-04-28 21:20:23 +01:00 |
|
|
7ae3c6478f
|
disable config checking
|
2022-04-28 18:51:20 +01:00 |
|
|
5c1dd13503
|
reduce multipart size to 5MiB
Otherwise the uploads will fail because the internet is just this slow for my mastodon instance lmao
|
2022-04-28 08:43:02 +01:00 |
|
|
34254d2dfb
|
create the nginx cache
|
2022-04-28 08:43:02 +01:00 |
|
|
db3e7f798b
|
disable mail filtering for now
|
2022-04-27 11:39:35 +01:00 |
|
|
054a2bcf33
|
add the controller worker
|
2022-04-27 11:37:49 +01:00 |
|
|
07aa518911
|
listen to rspamd on :11332
|
2022-04-27 11:30:34 +01:00 |
|
|
70c26f615a
|
increase S3 timeouts as the internet is slow as molasses
|
2022-04-27 09:48:08 +01:00 |
|
|
5bf783123e
|
oh god apparently my mail was broken
|
2022-04-27 09:06:17 +01:00 |
|
|
07a4d2ad4f
|
upgrade to elasticsearch 7
|
2022-04-26 13:14:40 +01:00 |
|
|
8d476bfcd2
|
fix the header situation
|
2022-04-26 13:06:21 +01:00 |
|
|
7f7e30e92b
|
Revert "use the s3 bucket url instead"
This reverts commit 7ee99f3317 .
|
2022-04-26 13:01:21 +01:00 |
|
|
828169373a
|
recognize nixos-8gb-fsn1-1 as a reverse proxy
|
2022-04-26 12:58:51 +01:00 |
|
|
d3c0d0f8b6
|
don’t use a named locations block
|
2022-04-26 12:57:13 +01:00 |
|
|
7ee99f3317
|
use the s3 bucket url instead
|
2022-04-26 12:54:50 +01:00 |
|
|
9dc9b308a4
|
fix the proxy pass destination
|
2022-04-26 12:48:49 +01:00 |
|
|
3dcae3ab31
|
make the endpoint an https endpoint
|
2022-04-26 12:34:53 +01:00 |
|
|
d8308e0769
|
add mastodon webfinger
|
2022-04-26 12:31:59 +01:00 |
|
|
ae20e740f1
|
set s3_endpoint
|
2022-04-26 12:30:00 +01:00 |
|
|
338e127d68
|
fix nginx config
|
2022-04-26 10:03:00 +01:00 |
|
|
adbfaf3c78
|
fix proxy-pass
|
2022-04-26 09:48:16 +01:00 |
|
|
ed65f63452
|
fix eval
|
2022-04-26 09:45:29 +01:00 |
|
|
e3b2559439
|
pass check
|
2022-04-26 09:44:10 +01:00 |
|
|
3935d18c0b
|
correct path to the modules directory
|
2022-04-26 09:42:42 +01:00 |
|
|
74f7ebdcce
|
host mastodon assets on a separate subdomain
|
2022-04-26 09:40:11 +01:00 |
|
|
7be407a2b7
|
disable mastodon unix sockets
|
2022-04-26 09:20:21 +01:00 |
|
|
a13cad10b1
|
maybe this worksk?
|
2022-04-26 09:10:54 +01:00 |
|
|
c45a360ec7
|
have nginx access mastodon via port?
|
2022-04-26 08:59:53 +01:00 |
|
|
e85a20173c
|
please work omg
|
2022-04-26 08:48:07 +01:00 |
|
|
0b93407955
|
use https://mastodon.int.chir.rs/
|
2022-04-26 08:26:14 +01:00 |
|
|
a2a75691c9
|
move shit around?
|
2022-04-26 08:19:57 +01:00 |
|
|
fbc89a2314
|
enableSSL -> addSSL
|
2022-04-26 08:11:54 +01:00 |
|
|
08c7bc67bf
|
connect to mastodon via http i don’t care anymore
|
2022-04-26 08:06:57 +01:00 |
|
|
c42defd47b
|
fix stuff?
|
2022-04-26 07:53:03 +01:00 |
|
|
8b11f2e04c
|
fix eval error*2
|
2022-04-26 07:36:17 +01:00 |
|
|
e73e76a932
|
fix eval error
|
2022-04-26 07:28:34 +01:00 |
|
|
400315012d
|
add a mastodon.int.chir.rs
|
2022-04-26 07:26:16 +01:00 |
|
|
ec0daf01dd
|
fuck around with the dns until it works
|
2022-04-26 07:19:59 +01:00 |
|
|
ce9e828a85
|
increase the priority of localhost as build-pc isn’t always online
|
2022-04-26 07:12:17 +01:00 |
|
|
3562b07970
|
please work?
|
2022-04-26 07:09:56 +01:00 |
|
|
1aa1ce515a
|
oh oops
|
2022-04-25 21:14:55 +01:00 |
|
|
1bbecc65d8
|
set the proxy header?
|
2022-04-25 21:07:39 +01:00 |
|
|
e505caface
|
redis.mastodon -> redis.servers.mastodon
|
2022-04-25 19:22:16 +01:00 |
|
|
b4f88658e4
|
fix bug in the mastodon module
|
2022-04-25 19:09:27 +01:00 |
|
|
2e376a8c18
|
add redis extra config
|
2022-04-25 18:01:55 +01:00 |
|
|
1202604cbc
|
add mastodon reverse-proxy
|
2022-04-25 17:57:59 +01:00 |
|
|
2d03f310b9
|
config.secrets → config.sops.secrets
|
2022-04-25 17:51:59 +01:00 |
|
|
15328ab025
|
add nginx vhost
|
2022-04-25 17:51:59 +01:00 |
|
|
66dc646d02
|
add mastodon
|
2022-04-25 17:47:59 +01:00 |
|
|
877bef3dbc
|
fix some stuff
|
2022-04-25 09:49:32 +01:00 |
|
|
c4121a6b58
|
use backblaze again
|
2022-04-25 09:15:24 +01:00 |
|
|
acf026d5f0
|
pass hydra.chir.rs to nas.int.chir.rs
|
2022-04-25 08:42:57 +01:00 |
|
|
b2eb3a2844
|
do the correct thing (utf8 ssid)
|
2022-04-24 22:05:35 +01:00 |
|
|
64c290bbfd
|
forgot to enable hostapd
|
2022-04-24 22:01:17 +01:00 |
|
|
0e17a59abb
|
make the cache key a secret
|
2022-04-24 21:54:48 +01:00 |
|
|
f7b1c750aa
|
add hostapd support
|
2022-04-24 21:20:53 +01:00 |
|
|
6e95290303
|
Track node_exporter for the nas
|
2022-04-24 16:10:12 +01:00 |
|
|
6b6d7281e0
|
Add a backups group
|
2022-04-24 13:14:47 +01:00 |
|
|
102234539e
|
fix eval for nas
|
2022-04-24 13:12:12 +01:00 |
|
|
1c39d0ccf1
|
Add host keys for initrd ssh
|
2022-04-24 09:50:26 +01:00 |
|
|
3cbb1e3024
|
Add ssh access in initrd
|
2022-04-24 09:43:57 +01:00 |
|
|
80544d5c7c
|
add the most basic-ass rspamd config possible
|
2022-04-21 08:47:28 +01:00 |
|
|
4e0152ba06
|
Re-add hydra.int.chir.rs.
This is because there is no reason for me to be accessing hydra over my
publically accessible server and be limited to maybe 100kB/s
|
2022-04-20 09:24:42 +01:00 |
|
|
529ade54ea
|
use nutty-noon.int.chir.rs instead of the removed hydra.int.chir.rs
|
2022-04-17 09:59:59 +01:00 |
|
|
74ddd61227
|
Enable autofetch
this is because the constant authorization spam is no longer an issue
|
2022-04-16 20:37:58 +01:00 |
|
|
5d75d2fca8
|
Allow static.darkkirb.de
|
2022-04-16 13:23:59 +01:00 |
|
|
bcfa70d341
|
fix the allowed uris list
|
2022-04-16 12:04:10 +01:00 |
|
|
034a6f7046
|
remove superseeded autodeploy
|
2022-04-15 19:34:35 +01:00 |
|
|
ffdc2b4059
|
The github token needs Bearer apparently
|
2022-04-15 18:48:34 +01:00 |
|
|
22cdfc034d
|
fix github username
|
2022-04-15 18:48:33 +01:00 |
|
|
2106e4b847
|
remove superseeded nix-cache
|
2022-04-15 18:48:32 +01:00 |
|
|
5e8fc3cce9
|
now
|
2022-04-15 09:59:11 +01:00 |
|
|
9afa666c9f
|
please
|
2022-04-15 09:54:28 +01:00 |
|
|
61e545a979
|
???
|
2022-04-15 09:49:48 +01:00 |
|
|
55b9ef55e2
|
set host to proxy host when reverse-proxying
|
2022-04-15 09:36:46 +01:00 |
|
|
d56b8c4e11
|
try to publish hydra
|
2022-04-15 09:28:02 +01:00 |
|
|
f9efdc24c3
|
Add githubstatus reporting
|
2022-04-15 09:12:37 +01:00 |
|
|
eebea1e3de
|
use more agressive compression options
|
2022-04-14 06:29:42 +01:00 |
|
|
a18cafdc94
|
Upload to backblaze
|
2022-04-13 13:39:43 +01:00 |
|
|
7d72b3662e
|
Use aws credentials
|
2022-04-13 13:39:43 +01:00 |
|
|
0d7c79d659
|
Add signing for nix-serve once again
|
2022-04-12 13:18:20 +01:00 |
|
|
d11f5975fa
|
Don’t upload hydra results to s3
|
2022-04-12 10:38:53 +01:00 |
|
|
1c5dd90edc
|
remove signing once again
|
2022-04-12 10:37:45 +01:00 |
|
|
a815c86cd1
|
remove owner for nix-serve secret
|
2022-04-12 10:35:14 +01:00 |
|
|
01ae3eaa04
|
add nix-serve signing
|
2022-04-12 10:34:04 +01:00 |
|
|
4b84f6f241
|
add missing lib
|
2022-04-12 09:00:35 +01:00 |
|
|
ed25df7369
|
add nix-serve
|
2022-04-12 08:56:19 +01:00 |
|
|
74843e79de
|
add github_token
|
2022-04-10 13:08:05 +01:00 |
|
|
1117e2b2ab
|
set buffer size to maximum?
|
2022-04-09 12:26:09 +01:00 |
|
|
61ce2cdffc
|
add some rt stuff
|
2022-04-09 12:22:14 +01:00 |
|
|
b851765359
|
fix username and uuid
|
2022-04-01 19:05:29 +01:00 |
|
|
7ce6d30cfe
|
feat: Move over the darkkirb.de zone
|
2022-03-20 10:13:37 +01:00 |
|
|
989285330f
|
fix: Make the clean-s3-cache timer actually work
|
2022-03-20 07:49:22 +01:00 |
|
|
fe438e8a90
|
feat: Add neo-layout git to allowed URIs
this is for the rewrite
|
2022-03-19 20:05:04 +01:00 |
|
|
9edb1dd015
|
feat: Add cache cleanup script
This fixes #77
|
2022-03-16 20:35:15 +01:00 |
|
|
303ec1e4a9
|
feat: Add rpz.int.chir.rs zone
fix #68
|
2022-03-12 22:04:01 +01:00 |
|
|
e5406d318f
|
fix: Use the main dns server instead of the copy
fix #67
|
2022-03-12 13:41:22 +01:00 |
|
|
9f73713f4e
|
Revert "fix: Allow the dns tkey for darkkirb.de"
This reverts commit 60373d3042 .
|
2022-03-12 13:39:19 +01:00 |
|
|
60373d3042
|
fix: Allow the dns tkey for darkkirb.de
fix #67
|
2022-03-12 11:25:56 +01:00 |
|