Commit graph

Select branches

Hide pull requests

chore/synapse-security-update

feat/invidious

feat/libreddit

feat/loomio

feat/matrix-hookshot

feat/matrix-moderation

feat/obs-portal-nachtigall

fix/forgejo-ssh

fix/use-nix-firewall-nat-feature-for-forgejo-redirect

main

Mono Color

• ddc5c65bf7
  
  chore: bump flake inputs chore/synapse-security-update teutat3s 2024-04-25 13:22:22 +0200
• a11255b433
  
  matrix-appservice-irc: remove unneeded syscall override teutat3s 2024-04-25 12:37:58 +0200
• 4f86c92941
  
  obs-portal: init obs-portal on nachtigall feat/obs-portal-nachtigall Benjamin Yule Bädorf 2024-02-22 19:20:24 +0100
• d62b6cda92
  
  Merge pull request 'ci: update forgejo runner to fix cache' (#152) from ci/update-forgejo-runner into main main teutat3s 2024-04-23 18:18:39 +0000
• c580fe0fbb
  
  ci: prevent flake inputs from GC as well teutat3s 2024-04-23 16:32:11 +0200
• 60aef1d038
  
  ci: prevent nix garbage collection teutat3s 2024-04-23 16:00:16 +0200
• fa9ce9d435
  
  gitea-actions-runner: don't run as systemd DynamicUser teutat3s 2024-04-23 15:42:33 +0200
• 9541e5029e
  
  flora-6: move forgejo-runner cache directory to /data teutat3s 2024-04-23 14:50:48 +0200
• c4d0d34807
  
  ci: revert cache-nix-action to version 4.0.3 teutat3s 2024-04-23 12:03:16 +0200
• d5fe65b60d
  
  ci: disable cachix daemon, spams logs with teutat3s 2024-04-23 02:18:10 +0200
• 0e7dc95250
  
  ci: remove broken purge config from check workflow teutat3s 2024-04-23 01:14:14 +0200
• c86e22b292
  
  ci: update forgejo-runner to version 3.4.1 teutat3s 2024-04-23 00:38:53 +0200
• 4992819742
  
  Merge pull request 'set pruneOpts for restic backups to daily 7, weekly 4, monthly 3' (#151) from feature/restic-backup-retention into main Hendrik Sokolowski 2024-04-22 19:38:21 +0000
• a9411d05a8
  
  set pruneOpts for restic backups to daily 7, weekly 4, monthly 3 Hendrik Sokolowski 2024-04-22 20:06:49 +0200
• e8530caf1d
  
  Merge pull request 'ci: update nix-quick-install-action, cache-nix-action, cachix-action' (#150) from chore-update-ci into main teutat3s 2024-04-22 15:19:36 +0000
• 7c492e7391
  
  Merge pull request 'chore: forgejo security update, update matrix-synapse et al.' (#149) from chore-update-flake into main teutat3s 2024-04-22 15:18:33 +0000
• a0c6f0dc08
  
  ci: fix cache-nix-action, use new config syntax teutat3s 2024-04-21 20:17:03 +0200
• 46c7c9ecb1
  
  ci: update nix-quick-install-action, cache-nix-action, teutat3s 2024-04-21 19:58:58 +0200
• fb4004e9f0
  
  chore: update flake inputs teutat3s 2024-04-21 19:28:02 +0200
• 3030b0f84d
  
  Merge pull request 'flora-6: add wg-ssh to ignored systemd-wait-online interfaces' (#148) from flora-6/fix-network-wait-online into main teutat3s 2024-04-14 21:53:33 +0000
• c07d24f6a7
  
  flora-6: add wg-ssh to ignored interfaces teutat3s 2024-04-14 23:22:53 +0200
• 0f297c4711
  
  Merge pull request 'chore: security update PHP, update element-web, misc updates' (#147) from chore-update-flake into main teutat3s 2024-04-14 20:29:39 +0000
• 679d9b236f
  
  Merge pull request 'nginx: set worker_processes to number of CPU cores' (#146) from feat/nginx-tuning into main teutat3s 2024-04-14 20:22:08 +0000
• 78d5e5a4f0
  
  chore: update flake inputs teutat3s 2024-04-14 22:09:37 +0200
• c768203bed
  
  nginx: set worker_processes to number of CPU cores teutat3s 2024-04-14 17:39:56 +0200
• b0c466869e
  
  Merge pull request 'wireguard: use IP addresses for wireguard endpoints' (#145) from fix/use-ip-for-wireguard into main teutat3s 2024-04-12 20:40:39 +0000
• b6a54efd9a
  
  fix: add comment with hostnames to wireguard peers teutat3s 2024-04-12 22:36:17 +0200
• 7e145040cc
  
  wireguard: use IP addresses for wireguard endpoints Benjamin Yule Bädorf 2024-04-12 22:31:28 +0200
• 9d94b888ae
  
  Merge pull request 'networking: add wireguard hosts to /etc/hosts' (#144) from wireguard/add-etc-hosts into main b12f 2024-04-12 19:54:09 +0000
• 8a9fe3b8fe
  
  chore: update flake inputs teutat3s 2024-04-12 21:35:08 +0200
• 8743ea7b0c
  
  networking: add wireguard hosts to /etc/hosts teutat3s 2024-04-12 21:31:36 +0200
• 8743b50f7f
  
  Merge pull request 'forgejo: also reroute ssh traffic for ipv6' (#139) from forgejo/reroute-ssh-ipv6 into main b12f 2024-04-12 19:38:15 +0000
• 316ba9ef53
  
  forgejo: also reroute ssh traffic for ipv6 Benjamin Yule Bädorf 2024-04-05 20:55:00 +0200
• afca75441c
  
  Merge pull request 'forgejo: enable repo search (indexer), save login cookie for 365 days' (#142) from feat/forgejo-enable-search into main teutat3s 2024-04-06 16:07:42 +0000
• 9698c47530
  
  Merge pull request 'mastodon: clean media older than 7 days' (#143) from mastodon/auto-clean-7-days into main teutat3s 2024-04-06 16:07:34 +0000
• ccb029dde3
  
  Merge pull request 'wireguard: add ryzensun to teutat3s' hosts' (#141) from wireguard/add-ryzensun-host into main teutat3s 2024-04-06 16:07:21 +0000
• 41e4d3427c
  
  mastodon: clean media older than 7 days teutat3s 2024-04-05 23:50:04 +0200
• 16e9d476cb
  
  Merge pull request 'docs: include notes regarding rollback in deploy docs, misc updates' (#140) from docs/update-deployment-docs into main teutat3s 2024-04-05 21:39:46 +0000
• 3caf085d0b
  
  wireguard: add ryzensun to teutat3s' hosts teutat3s 2024-04-05 23:32:59 +0200
• c5159dd66d
  
  forgejo: enable repo search (indexer), save login teutat3s 2024-04-05 23:29:49 +0200
• b27f8c1380
  
  docs: include notes regarding rollback in deploy teutat3s 2024-04-05 23:02:15 +0200
• 76ca43142a
  
  Merge pull request 'forgejo: make SSH keys declarative' (#138) from forgejo/ssh-keys-declarative into main b12f 2024-04-05 19:35:55 +0000
• 16c6aa3b61
  
  forgejo: make SSH keys declarative Benjamin Yule Bädorf 2024-04-05 19:14:10 +0200
• 315cbf5813
  
  Merge pull request 'fix(nextcloud): define a maintenance window' (#135) from chore/nextcloud-config-maintenance-window into main teutat3s 2024-04-05 18:41:17 +0000
• dd633ba55b
  
  Add separate rules for v4 and v6 fix/use-nix-firewall-nat-feature-for-forgejo-redirect Hendrik Sokolowski 2024-04-05 20:07:27 +0200
• d888bc60b7
  
  nachtigall: forgejo ssh use nat rules Hendrik Sokolowski 2024-04-05 19:29:17 +0200
• 9191729f5c
  
  Merge pull request 'nachtigall: forgejo: update firewall settings' (#137) from fix/git-forgejo-open-service-port-in-firewall into main b12f 2024-04-05 16:51:36 +0000
• b6b8d69852
  
  nachtigall: forgejo: update firewall settings Hendrik Sokolowski 2024-04-05 18:39:43 +0200
• 4380c3b0ab
  
  Merge pull request 'forgejo: use iptables routing instead of ssh patch' (#136) from fix/forgejo-ssh-again into main b12f 2024-04-05 15:26:10 +0000
• e618b9f9c2
  
  forgejo: use iptables routing instead of ssh patch Benjamin Yule Bädorf 2024-04-05 17:00:28 +0200
• ae0c90e4f8
  
  Merge pull request 'forgejo: allow multiple host addresses for SSH' (#133) from fix/forgejo-multi-host into main b12f 2024-04-05 14:27:03 +0000
• d7c9333ff4
  
  forgejo: allow multiple host addresses for SSH Benjamin Yule Bädorf 2024-04-05 15:35:47 +0200
• 18a62b8d35
  
  fix(nextcloud): define a maintenance window for teutat3s 2024-04-05 16:23:16 +0200
• 9ec77e2a30
  
  Update flake.nix (#134) Hendrik Sokolowski 2024-04-05 14:11:42 +0000
• 1bcb8bb7e0
  
  Merge pull request 'admins: Add axeman's wireguard device' (#132) from axeman-wireguard into main b12f 2024-04-05 13:41:43 +0000
• cf1e6f8134
  
  admins: Add axeman's wireguard device Akshay Mankar 2024-04-05 13:29:27 +0000
• ad1ea4a49e
  
  forgejo: run internal ssh server on port 22 fix/forgejo-ssh Benjamin Yule Bädorf 2024-04-05 15:02:39 +0200
• 83e293016f
  
  Merge pull request 'docs: explain admin access and secrets' (#130) from docs/admin-access into main b12f 2024-04-05 12:56:51 +0000
• 91a2b66134
  
  docs: explain admin access and secrets Benjamin Yule Bädorf 2024-04-05 14:45:59 +0200
• 2851273d18
  
  Merge pull request 'security/close-ssh' (#128) from security/close-ssh into main b12f 2024-04-05 12:51:04 +0000
• b1519c8f22
  
  ssh: only allow ssh on wireguard interface Benjamin Yule Bädorf 2024-04-05 13:05:45 +0200
• f7eaef0d18
  
  wireguard: fix flora-6 address and private key Benjamin Yule Bädorf 2024-04-05 11:26:38 +0000
• 51523439e7
  
  Merge pull request 'feat/wireguard' (#126) from feat/wireguard into main b12f 2024-04-05 11:09:31 +0000
• 48845d6cf6
  
  logins/wireguard: move teutat3s wireguard device Benjamin Yule Bädorf 2024-04-05 13:01:26 +0200
• c53adf51f7
  
  logins: add judy for hensoko Hendrik Sokolowski 2024-04-05 00:37:11 +0200
• a795f0824f
  
  logins: fix admin login merging Benjamin Yule Bädorf 2024-04-03 21:47:27 +0200
• 83125ae472
  
  logins: check for missing wireguard device attribute Benjamin Yule Bädorf 2024-04-03 21:17:38 +0200
• 147ed44b9a
  
  wireguard: add dumpyourvms teutat3s 2024-04-03 21:06:55 +0200
• 621e9336ed
  
  wireguard: add basic keys Benjamin Yule Bädorf 2024-04-03 21:03:14 +0200
• eacf60974c
  
  wireguard: initial commit Benjamin Yule Bädorf 2024-04-03 20:54:40 +0200
• 6748e44824
  
  Merge pull request 'chore: update element-desktop, matrix-synapse, nextcloud and misc' (#127) from chore/flake-updates into main b12f 2024-04-05 11:06:25 +0000
• 815dccc0b4
  
  chore: update flake inputs teutat3s 2024-04-04 18:49:09 +0200
• dda8ed6938
  
  Merge pull request 'mediawiki: update to v1.41.1' (#125) from mediawiki/v1.41.1 into main b12f 2024-03-29 23:41:43 +0000
• 9433a8aea7
  
  mediawiki: update to v1.41.1 Benjamin Yule Bädorf 2024-03-30 00:10:09 +0100
• 4f15e68808
  
  loomio: init feat/loomio Benjamin Yule Bädorf 2024-03-23 11:01:56 +0100
• 37ebcb3669
  
  Merge pull request 'website: add security.txt' (#122) from feat/security-txt into main b12f 2024-03-25 16:26:17 +0000
• 6aea728583
  
  Merge branch 'main' into feat/security-txt b12f 2024-03-25 15:38:30 +0000
• a5e72f9cc7
  
  Merge pull request 'matrix: set forgotten_room_retention_period to 7d' (#124) from matrix/room-retention-period into main b12f 2024-03-25 15:38:24 +0000
• b9cffad02a
  
  matrix: set forgotten_room_retention_period to 7d Benjamin Yule Bädorf 2024-03-24 18:24:30 +0100
• 2bb2247716
  
  website: add security.txt Benjamin Yule Bädorf 2024-03-22 12:38:29 +0100
• ef943f02e3
  
  Merge pull request 'Update element-web, matrix-synapse' (#121) from chore/flake-updates into main teutat3s 2024-03-21 10:24:34 +0000
• 45e91d7ef1
  
  fix: drone port should bind to localhost teutat3s 2024-03-21 10:44:40 +0100
• e33529ad4b
  
  chore: bump flake inputs teutat3s 2024-03-21 10:44:16 +0100
• 1f8e53053b
  
  Merge pull request 'public-keys: update b12f ssh keys with new yubikeys' (#120) from b12f/public-keys-update into main b12f 2024-03-20 10:51:41 +0000
• c8c10269c4
  
  public-keys: update b12f ssh keys with new yubikeys Benjamin Yule Bädorf 2024-03-20 11:27:23 +0100
• 27116f053a
  
  Merge pull request 'chore: updates for element-web, forgejo, mastodon, nextcloud' (#119) from chore/updates into main teutat3s 2024-03-05 22:38:52 +0000
• b76b7821a7
  
  chore: update flake inputs teutat3s 2024-03-05 21:38:58 +0100
• 14e689486b
  
  Merge pull request 'fix: nginx duplicate default server' (#118) from fix/nginx-duplicate-default-server into main teutat3s 2024-02-25 22:07:52 +0000
• c49ffb2d5b
  
  fix: nginx duplicate default server teutat3s 2024-02-25 23:02:00 +0100
• aa607396e4
  
  Merge pull request 'nginx/miom: init miom.space website' (#116) from feat/miom.space into main b12f 2024-02-25 21:42:03 +0000
• de04556191
  
  nginx/miom: disable logging Benjamin Yule Bädorf 2024-02-25 16:44:01 +0100
• 0e89b7f210
  
  nginx/miom: init miom.space website Benjamin Yule Bädorf 2024-02-25 16:06:29 +0100
• 1878595af2
  
  Merge pull request 'nginx/pub.solar: disable logging for homepage' (#117) from privacy/website-no-logging into main b12f 2024-02-25 18:10:30 +0000
• 24b77b6de5
  
  nginx/pub.solar: disable logging for homepage Benjamin Yule Bädorf 2024-02-25 17:01:34 +0100
• 50fa98eebb
  
  Merge pull request 'security: Upgrade mastodon to 4.2.7' (#114) from mastodon-4.2.7 into main Akshay Mankar 2024-02-16 13:47:58 +0000
• f7d7964299
  
  security: Upgrade mastodon to 4.2.7 Akshay Mankar 2024-02-16 13:21:48 +0100
• afcfb4fe0f
  
  Merge pull request 'chore: nix flake update' (#113) from flake-update-16-02 into main Akshay Mankar 2024-02-16 09:23:32 +0000
• bbc01be474
  
  chore: nix flake update Akshay Mankar 2024-02-16 10:13:32 +0100
• 0bf113e3a9
  
  Merge pull request 'feat: init tmate-ssh-server' (#112) from feat/tmate into main teutat3s 2024-02-14 20:32:14 +0000
• 842ec945f4
  
  forgejo: appName option has been renamed teutat3s 2024-02-07 19:02:04 +0100