Hendrik Sokolowski
b37ad608a4
update mediawiki config ( #91 )
...
* disable logging to /dev/stderr
* fix upload path
Reviewed-on: #91
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
Co-authored-by: Hendrik Sokolowski <hensoko@gssws.de>
Co-committed-by: Hendrik Sokolowski <hensoko@gssws.de>
2024-01-07 15:44:21 +00:00
teutat3s
7e8f3c8cf5
fix: update forgejo-actions-runner token, use
...
docker image from https://git.pub.solar/pub-solar/actions-base-image
2023-12-29 19:26:43 +01:00
teutat3s
afca5c3735
chore: bump Nextcloud to version 28
Flake checks / Check (pull_request) Successful in 18m24s
2023-12-28 17:38:41 +01:00
teutat3s
a310b414f7
fix: update well-known for sliding-sync
Flake checks / Check (pull_request) Failing after 50m5s
2023-12-16 14:57:36 +01:00
teutat3s
768d4c78bc
fix: use nginx locations recommended by upstream
...
https://github.com/matrix-org/sliding-sync#same-hostname
2023-12-16 14:48:08 +01:00
teutat3s
14fa3fdec2
feat(matrix): enable sliding-sync
...
Flake checks / Check (pull_request) Successful in 16m25s
Sliding Sync is an implementation of MSC3575 and a prerequisite for
running the new (still beta) Element X clients (Element X iOS and
Element X Android).
https://github.com/matrix-org/sliding-sync
https://github.com/matrix-org/matrix-spec-proposals/blob/kegan/sync-v3/proposals/3575-sync.md
2023-12-16 13:53:34 +01:00
teutat3s
d734adce58
fix: new Greenbaum mail server is mail.greenbaum.zone
Flake checks / Check (pull_request) Successful in 4m12s
2023-12-13 20:45:35 +01:00
teutat3s
e3d4f61a42
feat(nachtigall): send logs to loki, https+basic auth
...
Flake checks / Check (pull_request) Successful in 4m5s
Use caddy as reverse proxy for loki on flora-6, add basic auth
Add promtail to nachtigall, push logs to flora-6
2023-12-13 19:18:56 +01:00
teutat3s
10bb3295de
fix: grafana editor role is unused for now
Flake checks / Check (pull_request) Successful in 4m21s
2023-12-13 17:52:01 +01:00
teutat3s
e8cf4dceb0
fix(flora-6): allow traffic from br-+ interfaces
2023-12-13 17:51:34 +01:00
teutat3s
1b9a6bb0c2
fix: don't ignore interfaces that can change
2023-12-13 02:12:12 +01:00
teutat3s
219b67df20
fix: add 4 logs retention for loki
2023-12-13 02:12:12 +01:00
teutat3s
6c1fa290e8
feat(prometheus): add job to scrape nachtigall.pub.solar
2023-12-13 02:12:12 +01:00
teutat3s
d5b59ea18a
feat(prometheus): add node-exporter to nachtigall,
...
protect endpoint https://nachtigall.pub.solar/metrics
with TLS and basic auth
2023-12-13 02:12:11 +01:00
teutat3s
fdda65eea9
feat: init loki
2023-12-13 02:12:11 +01:00
teutat3s
0e290f080e
feat(grafana): provision node-exporter dashboard
2023-12-13 02:12:11 +01:00
teutat3s
6b15d72d85
fix: systemd-networkd-wait-online timing out
2023-12-13 02:12:11 +01:00
teutat3s
2f7eccc970
fix: grafana root_url needs https://, role mapping
2023-12-13 02:12:11 +01:00
teutat3s
8dc908aabd
feat(flora-6): init grafana + prometheus on
...
grafana.pub.solar
2023-12-13 02:12:10 +01:00
teutat3s
6bfeb835c2
fix: type INI atom (null, bool, int, float or string)
...
Flake checks / Check (pull_request) Successful in 18m0s
option `services.gitea.settings.webhook.ALLOWED_HOST_LIST' is not of
type `INI atom (null, bool, int, float or string)'
2023-12-08 17:37:28 +01:00
Benjamin Bädorf
97a592a53e
forgejo: allow webhooks to all pub.solar subdomains
...
Flake checks / Check (pull_request) Failing after 1m54s
This should fix the following error that was occuring while trying to post
notices to matrix channels:
```
Delivery: Put "https://matrix.pub.solar/_matrix/client/r0/rooms/[...] ": dial tcp [::1]:443: webhook can only call allowed HTTP servers (check your webhook.ALLOWED_HOST_LIST setting), deny 'matrix.pub.solar([::1]:443)'
```
2023-12-08 17:12:02 +01:00
teutat3s
a3ce107c73
Merge pull request 'feat: backup matrix-synapse, matrix-appservice-irc, mautrix-telegram to storagebox' ( #76 ) from feat/matrix-backups into main
...
Reviewed-on: #76
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2023-12-08 15:36:10 +00:00
teutat3s
caaab0e14d
fix: new Greenbaum mail server is mail.greenbaum.zone
Flake checks / Check (pull_request) Successful in 19m16s
2023-12-05 20:57:26 +01:00
teutat3s
3ac327a750
feat: backup matrix-synapse, matrix-appservice-irc,
...
Flake checks / Check (pull_request) Successful in 17m55s
mautrix-telegram to storagebox
2023-12-03 13:11:25 +01:00
Akshay Mankar
75270321d5
fix: Allow matrix-appservice-irc to chown things
...
Flake checks / Check (pull_request) Successful in 16m20s
@chown is part of @privileged. It is used by sed which is used to manage the
registration.yaml
2023-12-02 17:22:28 +01:00
teutat3s
becaa9d649
fix: revert mautrix-telegram changes
Flake checks / Check (pull_request) Successful in 16m9s
2023-12-02 16:09:15 +01:00
teutat3s
37528c0874
fix: mautrix-telegram ExecStart missing \
Flake checks / Check (pull_request) Successful in 16m3s
2023-12-02 15:44:40 +01:00
teutat3s
1cfe140e77
fix: mkForce mautrix-telegram ExecStart
Flake checks / Check (pull_request) Has been cancelled
2023-12-02 15:43:52 +01:00
teutat3s
f911ac7bad
fix(matrix-synapse): needs to defince oidc extras
...
after NixOS module updates
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights
2023-12-02 15:35:02 +01:00
teutat3s
904a73b51d
fix(mautrix-telegram): should not try to update config
...
See: https://github.com/mautrix/python/pull/152
2023-12-02 15:33:58 +01:00
teutat3s
35a4ac5619
Merge pull request 'feat: NixOS 23.11 Tapir' ( #74 ) from feat/nixos-23.11 into main
...
Reviewed-on: #74
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2023-12-02 12:53:18 +00:00
teutat3s
7cf6f51516
fix: nextcloud interned strings buffer defaults to 23 now
Flake checks / Check (pull_request) Successful in 22m24s
2023-12-02 11:58:48 +01:00
teutat3s
2ee4bc5682
feat: NixOS 23.11 Tapir
...
https://nixos.org/manual/nixos/stable/release-notes#sec-release-23.11-highlights
Track nixos-23.11 branch, remove unstable overlays
This will update our services to the following versions:
nextcloud: 27.1.3 -> 27.1.4
forgejo: 1.20.5-0 -> 1.20.6-0
keycloak: 21.1.2 -> 22.0.5
matrix-synapse: 1.95.1 -> 1.97.0
Internal:
postgresql: 14.9 -> 15.5
Flake inputs diff:
• Updated input 'home-manager':
'github:nix-community/home-manager/28535c3a34d79071f2ccb68671971ce0c0984d7e' (2023-11-19)
→ 'github:nix-community/home-manager/aeb2232d7a32530d3448318790534d196bf9427a' (2023-11-24)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/d2332963662edffacfddfad59ff4f709dde80ffe' (2023-11-30)
→ 'github:nixos/nixpkgs/5de0b32be6e85dc1a9404c75131316e4ffbc634c' (2023-12-01)
2023-12-02 11:13:56 +01:00
Benjamin Bädorf
1d3934693b
nextcloud: add skeleton directory that adds a good readme for new users
...
Flake checks / Check (pull_request) Successful in 16m18s
Co-authored-by: teutat3s <teutates@mailbox.org>
2023-12-02 11:11:16 +01:00
Akshay Mankar
2cbc46c154
matrix: Move the whole email section into the secret
...
Flake checks / Check (pull_request) Successful in 15m27s
Matrix doesn't deep merge the secrets, so this is necessary
2023-11-25 23:37:58 +01:00
teutat3s
9f633582d1
feat: add well-known for matrix support contacts
Flake checks / Check (pull_request) Successful in 16m52s
2023-11-25 14:28:23 +01:00
Akshay Mankar
8a2d946206
matrix: Use production domains
Flake checks / Check (pull_request) Successful in 18m59s
2023-11-19 18:17:58 +01:00
Akshay Mankar
35afcd9682
matrix: Make public rooms discoverable over federation
2023-11-19 18:12:08 +01:00
Akshay Mankar
fe284a20d9
matrix: Fix typo
2023-11-19 18:12:08 +01:00
Akshay Mankar
f0c3178b4d
matrix: Use greenbaum cloud for sending emails
2023-11-19 18:12:07 +01:00
Akshay Mankar
7fcefe4b85
matrix: Use chat.pub.solar as invite_client_location
2023-11-19 18:12:07 +01:00
Akshay Mankar
8a2f83c96a
nachtigall: Deploy coturn and configure matrix to use it
Flake checks / Check (pull_request) Successful in 19m20s
2023-11-19 18:08:15 +01:00
Akshay Mankar
a2e7adbc79
element: Add themes
Flake checks / Check (pull_request) Successful in 22m49s
2023-11-19 16:03:24 +01:00
Akshay Mankar
e12b3d5c40
matrix: Import config for IRC
Flake checks / Check (pull_request) Successful in 18m13s
2023-11-19 14:53:14 +01:00
teutat3s
7037abb8f3
fix: forgejo needs module from nixos-unstable
...
Flake checks / Check (pull_request) Successful in 17m50s
for SSH access
2023-11-19 02:23:34 +01:00
teutat3s
8bc731da6e
Merge pull request 'feat: backups to hetzner storagebox' ( #66 ) from feat/backups-to-storagebox into main
...
Reviewed-on: #66
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2023-11-18 22:13:17 +00:00
teutat3s
40ed46b05b
Merge pull request 'feat: pull in forgejo + mastodon updates early' ( #64 ) from feat/early-forgejo-mastodon-updates into main
...
Reviewed-on: #64
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2023-11-18 22:13:06 +00:00
teutat3s
e41127593b
Merge pull request 'fix(nextcloud): push server is not a trusted proxy' ( #62 ) from fix/nextcloud-trusted-proxies into main
...
Reviewed-on: #62
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2023-11-18 22:12:50 +00:00
teutat3s
a461fc72f6
feat(backups): start backups in 5 minute interval
Flake checks / Check (pull_request) Successful in 19m42s
2023-11-18 22:41:48 +01:00
teutat3s
2195b7ed0a
feat: backups to hetzner storagebox
Flake checks / Check (pull_request) Successful in 19m22s
2023-11-18 22:30:23 +01:00
teutat3s
37176a52ce
feat: mastodon module updates from nixos-unstable
...
Flake checks / Check (pull_request) Successful in 18m34s
Pull in changes from https://github.com/NixOS/nixpkgs/pull/251950 early
2023-11-18 18:46:23 +01:00
teutat3s
d26b3c12f4
fix(nextcloud): push server is not a trusted proxy
...
Flake checks / Check (pull_request) Successful in 17m11s
The nextcloud push service would fail with the following error message
when deploying a new version:
please add '2a01:4f8:172:1c25::1' to the list of trusted proxies or
configure any existing reverse proxy to forward the 'x-forwarded-for'
send by the push server
The following x-forwarded-for header was received by Nextcloud: 1.2.3.4
The following trusted proxies are currently configured: "127.0.0.1", "::1"
https://docs.nextcloud.com/server/stable/admin_manual/configuration_server/reverse_proxy_configuration.html#defining-trusted-proxies
2023-11-18 18:12:38 +01:00
teutat3s
c88a0608f6
fix: matrix delegation via well-known for test domain
...
Flake checks / Check (pull_request) Successful in 17m14s
We use pub.solar as our server_name and matrix.pub.solar:8448 for matrix
federation traffic. The well-known record served at
https://pub.solar/.well-known/matrix/server should point to
matrix.pub.solar:8448. The same is true for test.pub.solar and
matrix.test.pub.solar:8448.
https://matrix-org.github.io/synapse/latest/delegate.html
2023-11-18 17:46:56 +01:00
Benjamin Bädorf
33e003d4b4
feat: add wellknown for matrix test domain
2023-11-18 17:32:56 +01:00
teutat3s
f2364b314a
fix: keycloak secret file permissions
2023-11-15 21:43:44 +01:00
b12f
f5185e5c15
feat: add mediawiki
...
Flake checks / Check (pull_request) Has been cancelled
Co-authored-by: @teutat3s <teutates@mailbox.org>
2023-11-15 21:40:29 +01:00
teutat3s
25549fdc53
fix: link to our statutes / satzung
Flake checks / Check (pull_request) Successful in 16m19s
2023-11-15 18:54:47 +00:00
teutat3s
9c1d19d49f
nachtigall: move SSH private key from user to host
2023-11-15 18:54:32 +00:00
teutat3s
43512ae6e7
forgejo-actions-runner: use Node.js docker images
...
Regenerate auth token
2023-11-15 18:54:32 +00:00
teutat3s
1bd7e5c0e7
docs: clean up
2023-11-15 18:54:32 +00:00
teutat3s
7be3567e6d
flora-6: refactor to use flake.parts
2023-11-15 18:54:32 +00:00
teutat3s
e041f05505
feat: advertise sliding sync support to matrix clients
Flake checks / Check (push) Successful in 17m48s
2023-11-10 19:02:13 +01:00
Benjamin Bädorf
b085c2e2b2
feat: add all matrix well-known data to nginx
Flake checks / Check (push) Failing after 13s
2023-11-07 15:19:55 +01:00
Benjamin Bädorf
6fa03994b1
fix: add matrix well-known for pub.solar
2023-11-07 15:12:24 +01:00
Benjamin Bädorf
d69e0350ef
fix: use clean new directory for backups on droppie
Flake checks / Check (push) Failing after 13s
2023-11-06 22:59:17 +00:00
Benjamin Bädorf
07df547f33
fix: specify sftp storage for droppie restic backups
2023-11-06 22:59:17 +00:00
teutat3s
428fcab009
fix: store forgejo sessions in DB
...
Flake checks / Check (push) Failing after 14s
See:
https://docs.gitea.com/administration/config-cheat-sheet#session-session
2023-11-06 22:34:51 +01:00
Benjamin Bädorf
c8233cf6a7
chore: simplify sudo command for backups
2023-11-06 22:22:36 +01:00
Benjamin Bädorf
052d752d27
feat: add settings_local.json to mailman-web backup
2023-11-06 22:20:29 +01:00
Benjamin Bädorf
841757517f
refactor: small backup refactoring
2023-11-06 21:07:24 +00:00
Benjamin Bädorf
42fbde31e5
feat: droppie backups for all nachtigall services
2023-11-06 21:07:24 +00:00
Benjamin Bädorf
e7c70c6cd0
fix: nachtigall root ssh key config fixes
2023-11-06 21:07:24 +00:00
teutat3s
6a96345760
feat: enable gitea actions in forgejo
...
See: https://docs.gitea.com/usage/actions/quickstart
2023-11-06 22:06:16 +01:00
Benjamin Bädorf
e8ad662631
refactor: change file structure to use modules dir
...
This commit changes the file structure around, so that we have the
following parts:
`/modules` contains reusable logic blocks for hosts.
`/hosts` contains host configurations.
`/lib` contains nix library functions.
`/overlays` contains overlay files.
`/public-keys` contains all information regarding public keys.
This change reduces the complexity of flake.nix, instead delegating this
out to the `default.nix` files in the above directories.
2023-11-06 13:11:30 +01:00
Benjamin Bädorf
d011cb04e1
feat: add declarative root ssh key on nachtigall
2023-11-05 19:35:37 +01:00
Benjamin Bädorf
633549159e
fix: keep forgejo email addresses private by default
2023-11-05 15:06:30 +01:00
b12f
90b0fb53e6
Merge pull request 'fix: enable websockets for collabora' ( #43 ) from fix/collabora-websockets into main
...
Reviewed-on: #43
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-11-03 17:12:45 +00:00
teutat3s
b9e18a167c
fix: keycloak nginx buffer size
...
Tune according to
https://www.getpagespeed.com/server-setup/nginx/tuning-proxy_buffer_size-in-nginx
2023-11-03 13:54:11 +01:00
teutat3s
cd1fa3daef
fix: enable websockets for collabora
...
Adopt upstream recommended nginx config
https://sdk.collaboraonline.com/docs/installation/Proxy_settings.html#reverse-proxy-with-nginx-webserver
2023-11-03 12:52:32 +01:00
teutat3s
9fc42c44a8
fix: tune nextcloud / php-fpm pool settings
...
Calculated on https://spot13.com/pmcalculator/
with 4GiB RAM available, average php-fpm process size 80MiB
Original settings are
pm = dynamic
pm.max_children = 32
pm.max_requests = 500
pm.max_spare_servers = 4
pm.min_spare_servers = 2
pm.start_servers = 2
2023-10-31 21:24:27 +01:00
Benjamin Bädorf
cb26fa3d00
chore: disable uwsgi logging on searx
2023-10-29 23:51:28 +01:00
Benjamin Bädorf
1db27813dd
fix: Searx is running
2023-10-29 23:49:45 +01:00
teutat3s
a7b3490c15
Merge pull request 'fix: owncast websockets, forgejo max body size in nginx' ( #38 ) from fix-owncast into main
...
Reviewed-on: #38
Reviewed-by: b12f <hello@benjaminbaedorf.eu>
2023-10-29 22:12:21 +00:00
teutat3s
505602bd73
fix: set max body size to 1G for forgejo
2023-10-29 23:04:33 +01:00
teutat3s
9898e35208
fix: enable websockets in nginx for owncast
2023-10-29 23:04:11 +01:00
Benjamin Bädorf
edc76ebb1b
chore: add search.pub.solar dns entry
2023-10-29 22:14:13 +01:00
teutat3s
e28cedb274
fix: owncast missing import, enable websockets
2023-10-29 22:10:29 +01:00
Benjamin Bädorf
fe6edd54b1
feat: searx
2023-10-29 20:57:26 +01:00
teutat3s
94c7b6d7db
fix: postgresql service should always wait for ZFS mount
2023-10-29 20:53:16 +01:00
Benjamin Bädorf
f013c6e3f8
feat: make docker run on zfs, add unlocking docs
2023-10-29 19:39:48 +00:00
Benjamin Bädorf
a10d77dcf6
fix: increase php strings cache size for nextcloud
...
https://github.com/nextcloud/server/issues/31223
2023-10-29 19:39:48 +00:00
Benjamin Bädorf
13d46c22c5
fix: nextcloud connections to other applications
2023-10-29 19:39:48 +00:00
Benjamin Bädorf
2c2d77456e
chore: update nextcloud to v27
2023-10-29 19:39:48 +00:00
Benjamin Bädorf
7b4b79f5d4
fix: add host header to collabora nginx proxy_pass
2023-10-29 19:39:48 +00:00
Benjamin Bädorf
8ad19f72fc
fix: small nextcloud fixes
...
* Add admin pass
* Increase max post size
* Fix secret owner
2023-10-29 19:39:48 +00:00
teutat3s
4897317f4f
feat: add more nginx recommended settings
2023-10-29 15:40:35 +00:00
teutat3s
f48782e987
feat: owncast initial commit
...
https://owncast.online/
2023-10-29 15:40:35 +00:00
Benjamin Bädorf
4d50282ab3
Merge branch 'feat/nextcloud' of git.pub.solar:pub-solar/infra-new into feat/nextcloud
2023-10-29 13:52:50 +01:00
Benjamin Bädorf
42879bde05
fix: don't set maintenance mode in nix config
2023-10-29 13:52:11 +01:00
Benjamin Bädorf
569ff3ee03
fix: fix php package name
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
d2c6756371
chore: use php8.2 for nextcloud
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
a14af74d82
fix: don't global bind collabora
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
f33a7c48e7
feat: add collabora
2023-10-29 12:49:36 +00:00
Hendrik Sokolowski
1577462c94
add virtualhost for nextcloud
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
c187b59bd7
feat: add nextcloud secrets
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
422b1ba33e
feat: add complete nextcloud config without secrets
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
41c5f1797c
feat: nextcloud initial commit
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
c6453f2631
feat: add complete nextcloud config without secrets
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
8a2889fd46
feat: nextcloud initial commit
2023-10-29 12:49:36 +00:00
Benjamin Bädorf
b42917de78
fix: fix php package name
2023-10-29 13:46:52 +01:00
Benjamin Bädorf
ac817a7ca2
chore: use php8.2 for nextcloud
2023-10-29 13:46:06 +01:00
Benjamin Bädorf
25f4c8d296
fix: don't global bind collabora
2023-10-29 13:43:41 +01:00
Benjamin Bädorf
3cb548d77a
feat: add collabora
2023-10-29 13:42:50 +01:00
Hendrik Sokolowski
ea7996ce0a
add virtualhost for nextcloud
2023-10-29 13:42:23 +01:00
Benjamin Bädorf
ece8e9156a
feat: add nextcloud secrets
2023-10-29 13:42:22 +01:00
Benjamin Bädorf
9244a42a20
feat: add complete nextcloud config without secrets
2023-10-29 13:42:01 +01:00
Benjamin Bädorf
1425492e19
feat: nextcloud initial commit
2023-10-29 13:42:00 +01:00
Benjamin Bädorf
8737ddbe6c
feat: add complete nextcloud config without secrets
2023-10-29 13:41:43 +01:00
Benjamin Bädorf
db77fcc378
feat: nextcloud initial commit
2023-10-29 13:41:41 +01:00
Akshay Mankar
eaf99a2d78
nachtigall: Add nginx config for serving matrix-synapse
2023-10-29 13:39:20 +01:00
teutat3s
5aa4f8b947
fix: mailman web static dir permissions
2023-10-29 12:38:12 +00:00
teutat3s
e859cbbc10
fix: reduce forgejo logs to warning level
2023-10-29 12:38:12 +00:00
Benjamin Bädorf
f1fc31eea7
fix: update mailman nginx https settings
2023-10-29 12:38:12 +00:00
Benjamin Bädorf
b7d0e23703
refactor: add nginx to mastodon group in mastodon module
2023-10-29 12:38:12 +00:00
teutat3s
e9ef6be915
fix: use 127.0.0.1 IPv4 instead of localhost to avoid errors
...
with localhost resolving to IPv6
2023-10-29 12:30:36 +01:00
teutat3s
f168a5393f
Merge pull request 'nachtigall: Configure matrix-synapse with telegram integration' ( #7 ) from feat/matrix into main
...
Reviewed-on: pub-solar/infra-new#7
Reviewed-by: teutat3s <teutates@mailbox.org>
2023-10-29 00:56:00 +00:00
teutat3s
688f9279d1
feat: move matrix related files into subdir
2023-10-29 02:55:35 +02:00
Benjamin Bädorf
b8431f595e
nachtigall: Configure matrix-synapse with telegram integration
2023-10-29 01:37:44 +02:00
teutat3s
2916ca4cd3
feat: mailman initial commit
2023-10-29 00:31:09 +02:00
Benjamin Bädorf
b311b513d0
fix: gitea secrets
2023-10-28 23:55:39 +02:00
Benjamin Bädorf
cda39f5e2a
feat: add forgejo
2023-10-28 23:36:04 +02:00
teutat3s
620c1715b4
fix: import keycloak module
2023-10-28 23:33:07 +02:00
Benjamin Bädorf
4f7b30c2c3
fix: use flake.inputs instead of inputs directly
2023-10-28 23:18:44 +02:00
Benjamin Bädorf
16a5ee93cc
fix: enable SSL for keycloak
2023-10-28 23:06:35 +02:00
Benjamin Bädorf
ce24876f3d
feat: add keycloak secrets and virtualhost
2023-10-28 23:06:35 +02:00
Benjamin Bädorf
5139cbe2db
feat: init keycloak
2023-10-28 23:06:35 +02:00
teutat3s
347d175a8a
feat: add mastodon redirects for OIDC using keycloak
2023-10-28 23:00:07 +02:00
teutat3s
310723a18c
fix: nginx tls connection to upstream
2023-10-28 22:52:57 +02:00
teutat3s
401baf5900
fix: nginx files.pub.solar proxy_pass host header
2023-10-28 22:15:40 +02:00
teutat3s
e9fc2dabbe
fix: enable recommendedProxySettings for nginx
...
https://search.nixos.org/options?channel=unstable&from=0&size=50&sort=relevance&type=packages&query=recommendedProxySettings
2023-10-28 21:42:01 +02:00
teutat3s
8b09f19add
fix: nginx user needs access to mastodon's unix socket
2023-10-28 21:30:37 +02:00
teutat3s
6f4741fae0
fix: missing nginx proxy cache zone
2023-10-28 21:12:33 +02:00
teutat3s
1983edcc5b
fix: add nginx virtualHost for mastodon
...
We use pub.solar as our LOCAL_DOMAIN and mastodon.pub.solar as our
WEB_DOMAIN. The NixOS module does not support this special use case.
See: https://github.com/NixOS/nixpkgs/issues/202399
2023-10-28 18:56:22 +02:00
teutat3s
d4ab1756b3
fix: files.pub.solar force TLS, remove default site
2023-10-28 18:24:14 +02:00
Hendrik Sokolowski
1d68ed73c3
add nginx virtual host for files.pub.solar
2023-10-28 18:24:13 +02:00
teutat3s
8a0ac64eac
Merge pull request 'fix: nginx config for pub.solar website' ( #22 ) from fix-nginx into main
...
Reviewed-on: pub-solar/infra-new#22
Reviewed-by: hensoko <hensoko@gssws.de>
2023-10-28 18:22:40 +02:00
teutat3s
f804de372c
Merge pull request 'feat: mastodon + agenix secrets' ( #13 ) from feat-mastodon into main
...
Reviewed-on: pub-solar/infra-new#13
Reviewed-by: hensoko <hensoko@gssws.de>
Reviewed-by: Akshay Mankar <axeman@noreply.git.pub.solar>
2023-10-28 18:22:31 +02:00
teutat3s
c162d46094
fix: address review comments
2023-10-28 18:18:06 +02:00
teutat3s
1e19efe20e
docs: add comment about streaming processes
2023-10-28 18:07:29 +02:00
teutat3s
5ffc4f67ff
fix: nginx config for pub.solar website
2023-10-28 17:50:37 +02:00
Hendrik Sokolowski
teutat3s
Benjamin Bädorf
Akshay Mankar