Commit graph

643 commits

Author SHA1 Message Date
375013c167
fix prune script 2022-06-09 21:56:41 +01:00
8a6a75418a
run registration for nixos-config 2022-06-05 12:01:17 +01:00
b806cc42d5
add secret for github runner 2022-06-05 11:50:43 +01:00
acbc63364d
add tokenfile 2022-06-05 08:53:27 +01:00
f4fa372f32
add github runner 2022-06-05 08:12:44 +01:00
9a411691a3 mautrix-whatsapp: 0.3.1 -> 0.4.0 2022-06-05 06:56:34 +01:00
f731c194b5
try runcommand 2022-06-04 15:01:04 +01:00
4d269f2edc
Revert "connect to matrix locally"
This reverts commit 8c6c4afc94.
2022-06-04 09:43:36 +01:00
30f360ccd4
fix proxying to media 2022-06-04 08:39:16 +01:00
86bffe5cd0
don’t do 384kHz on laptop 2022-06-03 08:12:31 +01:00
8c6c4afc94
connect to matrix locally 2022-06-01 20:49:19 +01:00
56420aa6fd
forward /_matrix/media to the matrix media repo 2022-06-01 20:46:47 +01:00
7a7e915ea2
sops.secrets -> config.sops.secrets 2022-05-30 15:00:37 +01:00
c22b586177
add discord-dev registration 2022-05-30 14:50:19 +01:00
9c37b8788f
remove sentry for synapse 2022-05-28 12:30:47 +01:00
42bca6e6a4
add sentry and async_media support 2022-05-28 08:43:59 +01:00
b60768ee17
Add msc2246 support 2022-05-28 08:38:51 +01:00
2b009b5ed3
increase scrape interval and timeout for synapse 2022-05-28 08:14:57 +01:00
bb506e078b
make labels index of type string 2022-05-28 08:07:20 +01:00
0c85011fcd
expose _synapse internally 2022-05-27 19:21:19 +01:00
2c06711d06
don’t write out log files 2022-05-27 18:58:46 +01:00
02613bab4f
delete remote matrix-media-repo data after a week 2022-05-27 18:56:39 +01:00
bcb2a2b652
add url previews 2022-05-27 15:27:26 +01:00
790cb1cdb0 Revert "switch to gnome"
This reverts commit 3e8bfba005.
2022-05-27 14:25:56 +01:00
3e8bfba005 switch to gnome 2022-05-27 12:54:33 +01:00
3898ab566c
downgrade stateversion because i need to migrate postgresql 2022-05-26 15:00:39 +01:00
d5aaf238f3
make matrix work again 2022-05-26 14:55:06 +01:00
52f62c43b5
Add server alias for cups 2022-05-25 12:36:37 +01:00
fb2afce5f5
Add cups 2022-05-25 09:37:43 +01:00
052bde2a56
add fail2ban rules for dovecot and postfix 2022-05-24 10:23:40 +01:00
63868eb38c
reload services after certificate updates 2022-05-24 10:15:11 +01:00
086d2aa7cd
remove superfluous dns2 secret 2022-05-24 10:10:55 +01:00
d2c1762442
set acme challenge path explicitely 2022-05-24 09:58:12 +01:00
86bc19fe8a
discord is wrapped 2022-05-21 19:44:00 +01:00
2f4985d4e6
maybe fix discord sound 2022-05-17 20:21:09 +01:00
139d30f8aa
apparently it switched to nixpkgs hydra wtf 2022-05-16 13:07:54 +01:00
adce436b0d
unblock port 22000 2022-05-12 08:56:29 +01:00
a44b57b689
set gui address 2022-05-12 08:46:29 +01:00
a0f985cfe6
Fix syncthing config 2022-05-12 08:43:51 +01:00
a84c75b7e2
Expose syncthing to wireguard 2022-05-12 08:29:01 +01:00
8066e7a3ac
Add firewall config for kde connect 2022-05-12 08:07:38 +01:00
b6c95b1d9e
it’s plasma5 2022-05-11 12:56:36 +01:00
a7cfe2f863
re-enable plasma 2022-05-11 12:54:32 +01:00
3bb37f0b62
fix OnBootSec and OnUnitActiveSec 2022-05-11 08:57:15 +01:00
6b6ffcb1c2
Switch to KDE 2022-05-11 07:56:55 +01:00
6136a45bcc
update stuff 2022-05-09 19:48:03 +01:00
8418449d26
i take it back lol 2022-05-07 15:45:03 +01:00
489397e635
Make the ap work for the switch? 2022-05-07 15:37:07 +01:00
fa80cb116c
the switch hates utf8 ssids :( 2022-05-07 15:22:03 +01:00
33f7f23498
Allow logging into the backup user 2022-05-07 10:12:36 +01:00
dc55037b57
make the backup user accessible 2022-05-06 16:04:09 +01:00
d630ed5a8b
Add backup stuff 2022-05-06 14:53:36 +01:00
d640573b6e
Add syncthing 2022-05-06 14:53:35 +01:00
36fce11a53
fix some skill issues 2022-05-05 21:26:49 +01:00
d4e29cd6f0
one weird trick to circumvent network filtering set up by people that haven’t used a computer in 20 years 2022-05-05 21:04:52 +01:00
02d00bd4a5
make my nas a router 2022-05-05 20:58:50 +01:00
56347e60d3
add mautrix-signal 2022-05-03 21:37:31 +01:00
0566e5c6ce
add mautrix-whatsapp 2022-05-03 20:25:50 +01:00
33e8f90a2c
fix matrix-media-repo metricks listener 2022-05-03 16:11:16 +01:00
c44472dcee
actually expose the postgres exporter 2022-05-03 15:31:20 +01:00
9ee58bae40
synapse does not like ipv6 addresses' 2022-05-03 15:23:05 +01:00
d290548781
remove tls for the metric port 2022-05-03 15:05:00 +01:00
2f861840a6
fix up all the metrics 2022-05-03 10:33:47 +01:00
90426985e2
Only remove /run/hydra-machines if nutty-noon.int.chir.rs is down 2022-05-03 06:56:11 +01:00
7ff84a9b3c
enable postgresql stat statements 2022-05-02 10:48:06 +01:00
89eb309195
async media is not supported 2022-05-01 16:01:26 +01:00
15caa9f5b9
enable tls 1.2 bc of federation 2022-05-01 12:30:57 +01:00
a7679c7caf
async media does not work ? 2022-05-01 08:44:28 +01:00
3112c39664
re-enable this nonsense again 2022-05-01 08:35:58 +01:00
8f696ead70
Did you know that nix offers no way to set the collation and ctype of a database on init? now you know 2022-05-01 08:29:26 +01:00
6e984b3d97
thanks synapse very cool 2022-05-01 08:27:43 +01:00
b2cf4e6232
remove fix synapse permissions script 2022-05-01 08:08:22 +01:00
6f32149a9a
add reverse-proxy entry for matrix 2022-05-01 08:04:58 +01:00
5238416bf9
correct user 2022-05-01 08:02:10 +01:00
a2a6f12335
wrong database name 2022-05-01 07:59:51 +01:00
4bc48badd3
switch to synapse 2022-05-01 07:50:18 +01:00
4a995c9566
these values were a mistake 2022-05-01 06:49:22 +01:00
2910cf0f94
dendrite unfortunately does not support encryption for appservices :( 2022-04-30 22:20:56 +01:00
fc7d25ab91
the fuck is going on 2022-04-30 22:18:44 +01:00
dfcc1a4700
bruh what 2022-04-30 22:15:10 +01:00
e53551313b
add device database 2022-04-30 22:00:30 +01:00
c1a1fd3b72
this was an oopsie 2022-04-30 21:51:30 +01:00
7f40fbc849
fix dendrite config 2022-04-30 21:41:12 +01:00
5e450524f2
fix address for application server? 2022-04-30 21:38:37 +01:00
031325d74c
remove double_puppet_server_map 2022-04-30 21:32:50 +01:00
ca18054357
oh ffs 2022-04-30 21:13:46 +01:00
3e94edd840
stop the dynamicuser nonsense 2022-04-30 21:10:45 +01:00
e66c0233be
remove superfluous config 2022-04-30 21:05:59 +01:00
c80d7995f0
meant webm to be a string 2022-04-30 21:03:28 +01:00
6419883aa9
as_token -> hs_token 2022-04-30 21:01:19 +01:00
3c3c98cf12
add mautrix-telegram 2022-04-30 20:57:57 +01:00
3d641d454b
correct the nginx cache path 2022-04-30 20:32:28 +01:00
7625fea1e9
don’t use the standard mastodon package but the imported mastodon-glitch one 2022-04-30 10:28:00 +01:00
cae19b1818
use mastodon-glitch 2022-04-30 10:23:15 +01:00
578111424f
use ping from iputils 2022-04-30 10:02:54 +01:00
791ece0391
ignore if hydra-machines does not exist 2022-04-30 10:01:29 +01:00
da1b3c7e9d
nix why does this option have two plurals 2022-04-30 09:43:08 +01:00
874b4d0280
fix hydra hosts 2022-04-30 09:39:45 +01:00
1ec0b04fd7
code had a skill issue 2022-04-30 09:15:58 +01:00
880fa1bd58
fix matrix-media-repo? 2022-04-30 09:08:21 +01:00
22c90930ca
Fix access control allow origin? 2022-04-30 09:02:24 +01:00
19b28b4a73
I love inconsistent configuration 2022-04-30 08:32:54 +01:00
50a50dca58
add matrix client discovery 2022-04-30 08:15:25 +01:00
d4d3d99b2c
set certificate of matrix.chir.rs 2022-04-29 21:55:02 +01:00
79571592f7
fix grotesque spelling of postgresql 2022-04-29 21:47:14 +01:00
c65ee43fba
fix database connection strings 2022-04-29 21:39:41 +01:00
302e4473f1
Expose matrix-dendrite 2022-04-29 21:35:33 +01:00
800dcd36ba
fix eval 2022-04-29 21:30:14 +01:00
d1e2a1b5cd
add dendrite 2022-04-29 21:21:31 +01:00
389e27d5c4
fucking work 2022-04-29 21:11:01 +01:00
27f45c4942
........ 2022-04-29 21:04:51 +01:00
c439d34853
use underscores instead of dashes in database name 2022-04-29 21:03:42 +01:00
2d7a261c26
fix the postgresql config hopefully 2022-04-29 21:00:21 +01:00
ee4f05d0f9
use local connection for postgresql 2022-04-29 20:52:22 +01:00
8adb47cede
it’s disable not disabled 2022-04-29 20:48:08 +01:00
bed795ee18
disable sslmode for local connection 2022-04-29 20:06:46 +01:00
c846546663
use go 1.16 and don’t do this random patch 2022-04-29 19:09:55 +01:00
694265b34d
fix quotes in the preStart script 2022-04-29 17:46:43 +01:00
33c3a7990f
fix overlapping names 2022-04-29 17:42:18 +01:00
c82c136e94
it’s writeText not writeFile 2022-04-29 17:38:47 +01:00
1d545cbc36
Add matrix-media-repo 2022-04-29 17:34:12 +01:00
025f0c5d20
remove old, useless configuration 2022-04-29 17:34:11 +01:00
7d90e8807a
protect the controller with a password 2022-04-29 14:28:35 +01:00
ce98e79865
fix the name (proxy -> rspamd_proxy) 2022-04-29 14:25:42 +01:00
823efaae44
use the proxy worker 2022-04-29 14:23:45 +01:00
4ec4924548
Wildly misleading documentation is my favourite
Apparently UCL is *NOT* JSON-compatible no matter what the documentation claims.
2022-04-29 14:13:20 +01:00
ca9c15b1b4
disable neural_gorup.conf temporarily 2022-04-29 14:02:10 +01:00
1185c485a5
services.redis.rspamd -> services.redis.servers.rspamd 2022-04-28 21:25:32 +01:00
5decac7cbf
integrate rspamd with postfix 2022-04-28 21:20:28 +01:00
c5028ed6a0
and rspamd config 2022-04-28 21:20:28 +01:00
dd980613e9
enable redis for rspamd 2022-04-28 21:20:27 +01:00
91b0e8d037
Move rspamd to nas 2022-04-28 21:20:23 +01:00
7ae3c6478f
disable config checking 2022-04-28 18:51:20 +01:00
5c1dd13503
reduce multipart size to 5MiB
Otherwise the uploads will fail because the internet is just this slow for my mastodon instance lmao
2022-04-28 08:43:02 +01:00
34254d2dfb
create the nginx cache 2022-04-28 08:43:02 +01:00
db3e7f798b
disable mail filtering for now 2022-04-27 11:39:35 +01:00
054a2bcf33
add the controller worker 2022-04-27 11:37:49 +01:00
07aa518911
listen to rspamd on :11332 2022-04-27 11:30:34 +01:00
70c26f615a
increase S3 timeouts as the internet is slow as molasses 2022-04-27 09:48:08 +01:00
5bf783123e
oh god apparently my mail was broken 2022-04-27 09:06:17 +01:00
07a4d2ad4f
upgrade to elasticsearch 7 2022-04-26 13:14:40 +01:00
8d476bfcd2
fix the header situation 2022-04-26 13:06:21 +01:00
7f7e30e92b
Revert "use the s3 bucket url instead"
This reverts commit 7ee99f3317.
2022-04-26 13:01:21 +01:00
828169373a
recognize nixos-8gb-fsn1-1 as a reverse proxy 2022-04-26 12:58:51 +01:00
d3c0d0f8b6
don’t use a named locations block 2022-04-26 12:57:13 +01:00
7ee99f3317
use the s3 bucket url instead 2022-04-26 12:54:50 +01:00
9dc9b308a4
fix the proxy pass destination 2022-04-26 12:48:49 +01:00
3dcae3ab31
make the endpoint an https endpoint 2022-04-26 12:34:53 +01:00
d8308e0769
add mastodon webfinger 2022-04-26 12:31:59 +01:00
ae20e740f1
set s3_endpoint 2022-04-26 12:30:00 +01:00
338e127d68
fix nginx config 2022-04-26 10:03:00 +01:00
adbfaf3c78
fix proxy-pass 2022-04-26 09:48:16 +01:00
ed65f63452
fix eval 2022-04-26 09:45:29 +01:00
e3b2559439
pass check 2022-04-26 09:44:10 +01:00
3935d18c0b
correct path to the modules directory 2022-04-26 09:42:42 +01:00
74f7ebdcce
host mastodon assets on a separate subdomain 2022-04-26 09:40:11 +01:00
7be407a2b7
disable mastodon unix sockets 2022-04-26 09:20:21 +01:00
a13cad10b1
maybe this worksk? 2022-04-26 09:10:54 +01:00
c45a360ec7
have nginx access mastodon via port? 2022-04-26 08:59:53 +01:00
e85a20173c
please work omg 2022-04-26 08:48:07 +01:00
0b93407955
use https://mastodon.int.chir.rs/ 2022-04-26 08:26:14 +01:00
a2a75691c9
move shit around? 2022-04-26 08:19:57 +01:00
fbc89a2314
enableSSL -> addSSL 2022-04-26 08:11:54 +01:00
08c7bc67bf
connect to mastodon via http i don’t care anymore 2022-04-26 08:06:57 +01:00
c42defd47b
fix stuff? 2022-04-26 07:53:03 +01:00
8b11f2e04c
fix eval error*2 2022-04-26 07:36:17 +01:00
e73e76a932
fix eval error 2022-04-26 07:28:34 +01:00
400315012d
add a mastodon.int.chir.rs 2022-04-26 07:26:16 +01:00
ec0daf01dd
fuck around with the dns until it works 2022-04-26 07:19:59 +01:00
ce9e828a85
increase the priority of localhost as build-pc isn’t always online 2022-04-26 07:12:17 +01:00
3562b07970
please work? 2022-04-26 07:09:56 +01:00
1aa1ce515a
oh oops 2022-04-25 21:14:55 +01:00
1bbecc65d8
set the proxy header? 2022-04-25 21:07:39 +01:00
e505caface
redis.mastodon -> redis.servers.mastodon 2022-04-25 19:22:16 +01:00
b4f88658e4
fix bug in the mastodon module 2022-04-25 19:09:27 +01:00
2e376a8c18
add redis extra config 2022-04-25 18:01:55 +01:00
1202604cbc
add mastodon reverse-proxy 2022-04-25 17:57:59 +01:00
2d03f310b9
config.secrets → config.sops.secrets 2022-04-25 17:51:59 +01:00
15328ab025
add nginx vhost 2022-04-25 17:51:59 +01:00
66dc646d02
add mastodon 2022-04-25 17:47:59 +01:00
877bef3dbc
fix some stuff 2022-04-25 09:49:32 +01:00
c4121a6b58
use backblaze again 2022-04-25 09:15:24 +01:00
acf026d5f0
pass hydra.chir.rs to nas.int.chir.rs 2022-04-25 08:42:57 +01:00
b2eb3a2844
do the correct thing (utf8 ssid) 2022-04-24 22:05:35 +01:00
64c290bbfd
forgot to enable hostapd 2022-04-24 22:01:17 +01:00
0e17a59abb
make the cache key a secret 2022-04-24 21:54:48 +01:00
f7b1c750aa
add hostapd support 2022-04-24 21:20:53 +01:00
6e95290303
Track node_exporter for the nas 2022-04-24 16:10:12 +01:00
6b6d7281e0
Add a backups group 2022-04-24 13:14:47 +01:00
102234539e
fix eval for nas 2022-04-24 13:12:12 +01:00
1c39d0ccf1
Add host keys for initrd ssh 2022-04-24 09:50:26 +01:00
3cbb1e3024
Add ssh access in initrd 2022-04-24 09:43:57 +01:00
80544d5c7c
add the most basic-ass rspamd config possible 2022-04-21 08:47:28 +01:00
4e0152ba06
Re-add hydra.int.chir.rs.
This is because there is no reason for me to be accessing hydra over my
publically accessible server and be limited to maybe 100kB/s
2022-04-20 09:24:42 +01:00
529ade54ea
use nutty-noon.int.chir.rs instead of the removed hydra.int.chir.rs 2022-04-17 09:59:59 +01:00
74ddd61227
Enable autofetch
this is because the constant authorization spam is no longer an issue
2022-04-16 20:37:58 +01:00
5d75d2fca8
Allow static.darkkirb.de 2022-04-16 13:23:59 +01:00
bcfa70d341
fix the allowed uris list 2022-04-16 12:04:10 +01:00
034a6f7046
remove superseeded autodeploy 2022-04-15 19:34:35 +01:00
ffdc2b4059
The github token needs Bearer apparently 2022-04-15 18:48:34 +01:00
22cdfc034d
fix github username 2022-04-15 18:48:33 +01:00
2106e4b847
remove superseeded nix-cache 2022-04-15 18:48:32 +01:00
5e8fc3cce9
now 2022-04-15 09:59:11 +01:00
9afa666c9f
please 2022-04-15 09:54:28 +01:00
61e545a979
??? 2022-04-15 09:49:48 +01:00
55b9ef55e2
set host to proxy host when reverse-proxying 2022-04-15 09:36:46 +01:00
d56b8c4e11
try to publish hydra 2022-04-15 09:28:02 +01:00
f9efdc24c3
Add githubstatus reporting 2022-04-15 09:12:37 +01:00
eebea1e3de
use more agressive compression options 2022-04-14 06:29:42 +01:00
a18cafdc94
Upload to backblaze 2022-04-13 13:39:43 +01:00
7d72b3662e
Use aws credentials 2022-04-13 13:39:43 +01:00
0d7c79d659
Add signing for nix-serve once again 2022-04-12 13:18:20 +01:00
d11f5975fa
Don’t upload hydra results to s3 2022-04-12 10:38:53 +01:00
1c5dd90edc
remove signing once again 2022-04-12 10:37:45 +01:00
a815c86cd1
remove owner for nix-serve secret 2022-04-12 10:35:14 +01:00
01ae3eaa04
add nix-serve signing 2022-04-12 10:34:04 +01:00
4b84f6f241
add missing lib 2022-04-12 09:00:35 +01:00
ed25df7369
add nix-serve 2022-04-12 08:56:19 +01:00
74843e79de
add github_token 2022-04-10 13:08:05 +01:00
1117e2b2ab
set buffer size to maximum? 2022-04-09 12:26:09 +01:00
61ce2cdffc
add some rt stuff 2022-04-09 12:22:14 +01:00
b851765359
fix username and uuid 2022-04-01 19:05:29 +01:00
7ce6d30cfe
feat: Move over the darkkirb.de zone 2022-03-20 10:13:37 +01:00
989285330f
fix: Make the clean-s3-cache timer actually work 2022-03-20 07:49:22 +01:00
fe438e8a90
feat: Add neo-layout git to allowed URIs
this is for the rewrite
2022-03-19 20:05:04 +01:00
9edb1dd015
feat: Add cache cleanup script
This fixes #77
2022-03-16 20:35:15 +01:00
303ec1e4a9
feat: Add rpz.int.chir.rs zone
fix #68
2022-03-12 22:04:01 +01:00
e5406d318f
fix: Use the main dns server instead of the copy
fix #67
2022-03-12 13:41:22 +01:00
9f73713f4e
Revert "fix: Allow the dns tkey for darkkirb.de"
This reverts commit 60373d3042.
2022-03-12 13:39:19 +01:00
60373d3042
fix: Allow the dns tkey for darkkirb.de
fix #67
2022-03-12 11:25:56 +01:00
eb0042cd81
feat: Expose hydra to the local network
fix #64
2022-03-12 10:45:11 +01:00
097ff2d4b6
feat: Do hydra builds against the cache directly
Also adds automated signing

fix #52
2022-03-08 20:18:16 +01:00
b2bfe70b64
fix: disable the derivation size limit in hydra
fix #51
2022-03-08 19:52:55 +01:00
2e60e56bd3
fix: Increase hydra limits
fix #51
2022-03-08 18:40:01 +01:00
7cd30c7b06
fix: Remove home protections for nginx
fix #46
2022-03-06 21:44:43 +01:00
ea38329dad
fix: Add acme cert for miifox
I thought this was automatic

fix #45
2022-03-06 21:34:23 +01:00
b37c784d10
feat: Move the int.chir.rs zone to nix
fix #43
2022-03-06 18:26:20 +01:00
86336e637f
fix: Allow phpfpm to access dovecot pw
fix #41
2022-03-06 14:43:10 +01:00
53607ccfc2
fix: Pass config file instead of config
fix #38
2022-03-06 12:05:23 +01:00
2bf4e84d27
fix: Missed the first argument to toYAML
fix #37
2022-03-06 11:50:56 +01:00
1729cd7957
fix: Use promtail config instead of deleted file
fix #36
2022-03-06 11:46:06 +01:00
22c5ff7adc
fix: Make loki work with multiple systems
fix #35
2022-03-06 11:44:08 +01:00
1f866df312
Revert "Disable Multiverse for now"
This reverts commit 90adb79e6b.
2022-03-05 17:57:00 +01:00
a1bcc25c83
enable multipart upload? 2022-03-03 19:41:23 +01:00
205f452250
Sign and upload to the new cache 2022-03-03 10:21:01 +01:00
3ea92074e8
make the cache internal-only 2022-03-02 21:36:18 +01:00
d228ef73d3
Add cache storj gateway 2022-03-02 20:56:15 +01:00
b397aa25e9
fix ggateway-st 2022-03-02 18:58:17 +01:00
2344b78ebd
switch to storj 2022-03-02 18:34:15 +01:00
19f2bdf21b
use nixFlakes instead of nixUnstable 2022-03-01 20:58:52 +01:00