teutat3s
99f84268e7
nextcloud: fine tune for performance, following
...
Flake checks / Check (pull_request) Successful in 4m1s
https://docs.nextcloud.com/server/latest/admin_manual/installation/server_tuning.html
2024-06-23 15:01:37 +02:00
teutat3s
f38aa289ea
matrix-synapse: enable more useful logging
2024-06-23 15:00:40 +02:00
teutat3s
aa244087d3
forgejo: use latest version from unstable for security fixes
...
Flake checks / Check (pull_request) Successful in 4m9s
error: Package ‘forgejo-1.20.6-1-unstable-2024-04-18’ in /nix/store/qk1dpz44db85rhd8lr4j6i2hkn9j5hg4-source/pkgs/applications/version-management/forgejo/default.nix:147 is marked as insecure, refusing to evaluate.
Known issues:
- Forgejo v1.20.x is EOL
- OAuth2 implementation does not always require authentication for public clients
2024-06-22 20:55:50 +02:00
teutat3s
002f6945dc
flake.lock: Update
...
Flake checks / Check (pull_request) Failing after 4m0s
Flake lock file updates:
• Updated input 'agenix':
'github:ryantm/agenix/c2fc0762bbe8feb06a2e59a364fa81b3a57671c9' (2024-05-24)
→ 'github:ryantm/agenix/3a56735779db467538fb2e577eda28a9daacaca6' (2024-06-14)
• Updated input 'deploy-rs':
'github:serokell/deploy-rs/b3ea6f333f9057b77efd9091119ba67089399ced' (2024-05-14)
→ 'github:serokell/deploy-rs/3867348fa92bc892eba5d9ddb2d7a97b9e127a8a' (2024-06-12)
• Updated input 'element-themes':
'github:aaronraimist/element-themes/6ed3a981191cbd59f03ea530f16e096b9a4c278c' (2024-05-28)
→ 'github:aaronraimist/element-themes/3bc82abc3dd468dabc933f0f9d0b443ed97554a6' (2024-06-20)
• Updated input 'maunium-stickerpicker':
'github:maunium/stickerpicker/47f17fde452b5e9f0c9e96ce0e2c878dd0574b7f?dir=web' (2024-05-18)
→ 'github:maunium/stickerpicker/333567f481e60443360aa7199d481e1a45b3a523?dir=web' (2024-06-19)
• Updated input 'nix-darwin':
'github:lnl7/nix-darwin/c0d5b8c54d6828516c97f6be9f2d00c63a363df4' (2024-05-29)
→ 'github:lnl7/nix-darwin/29b3096a6e283d7e6779187244cb2a3942239fdf' (2024-06-17)
• Updated input 'nixos-flake':
'github:srid/nixos-flake/aa9100167350cbdffaa272b0fd382d7c23606b86' (2024-05-22)
→ 'github:srid/nixos-flake/6335b2f05f007b95ac2438b0a55498f9f20e73f7' (2024-06-22)
• Updated input 'nixpkgs':
'github:nixos/nixpkgs/a62e6edd6d5e1fa0329b8653c801147986f8d446' (2024-05-31)
→ 'github:nixos/nixpkgs/03d771e513ce90147b65fe922d87d3a0356fc125' (2024-06-19)
• Updated input 'unstable':
'github:nixos/nixpkgs/57610d2f8f0937f39dbd72251e9614b1561942d8' (2024-05-31)
→ 'github:nixos/nixpkgs/d603719ec6e294f034936c0d0dc06f689d91b6c3' (2024-06-20)
2024-06-22 20:35:27 +02:00
teutat3s
02af5fb8c9
Merge pull request 'postgresql: tune' ( #208 ) from pg-tuning into main
...
Reviewed-on: #208
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-06-22 14:57:20 +00:00
teutat3s
d21ae91c3e
postgresql: tune
Flake checks / Check (pull_request) Successful in 13m50s
2024-06-22 16:42:38 +02:00
teutat3s
2a9686798f
Merge pull request 'centralize docs for SSH access' ( #206 ) from update-docs into main
...
Reviewed-on: #206
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-06-13 15:38:41 +00:00
teutat3s
c18a9da4e9
keycloak: update docs to use admin-cli client
...
Flake checks / Check (pull_request) Successful in 3m29s
instead of ops user
2024-06-10 20:35:40 +02:00
teutat3s
b687997390
docs: centralize SSH access docs
2024-06-10 20:35:40 +02:00
teutat3s
bc3752683b
keycloak: add docs how to delete unverified accounts
2024-06-10 20:35:36 +02:00
teutat3s
1ae6d9ecfe
Merge pull request 'loki tuning, lock down SSH for tankstelle, tweak nextcloud SMTP settings' ( #205 ) from misc-fixes into main
...
Reviewed-on: #205
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-06-10 10:41:57 +00:00
teutat3s
e2691988bf
nextcloud: use port 465 and TLS/SSL for mail transfer
Flake checks / Check (pull_request) Successful in 3m56s
2024-06-08 23:54:05 +02:00
teutat3s
d3fedd84e9
loki: tune settings, enable cache
2024-06-08 23:53:43 +02:00
teutat3s
d8866860d5
prometheus-node-exporter: use version 1.8.1 to fix
...
error message spamming logs
2024-06-08 23:52:53 +02:00
teutat3s
e127c668f6
metronom, tankstelle: cleanup for SSH only via wireguard
2024-06-08 23:52:08 +02:00
teutat3s
ba76973cc5
Merge pull request 'fix promtail host label' ( #204 ) from fix-promtail-label into main
...
Reviewed-on: #204
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-06-06 17:50:08 +00:00
teutat3s
6ea916603c
networking: set networking.domain in core module
Flake checks / Check (pull_request) Successful in 4m0s
2024-06-06 19:30:11 +02:00
teutat3s
bae41b07a8
promtail: use hostName to set label
2024-06-06 19:29:42 +02:00
teutat3s
3b865a688c
Merge pull request 'Add metronom + tankstelle to grafana + loki' ( #202 ) from monitor-metronom-tankstelle into main
...
Reviewed-on: #202
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-06-06 16:41:22 +00:00
teutat3s
eaed05c834
style: apply treefmt
Flake checks / Check (pull_request) Successful in 4m41s
2024-06-06 12:56:55 +02:00
teutat3s
9707edf2de
docs: add example for wireguard client config
Flake checks / Check (pull_request) Failing after 38s
2024-06-06 12:54:31 +02:00
teutat3s
2fdfd3b80e
docs: fix syntax in example
2024-06-06 12:54:14 +02:00
teutat3s
4350cbf7c4
tankstelle: add promtail, prometheus node-exporter
...
for monitoring, configure wireguard between flora-6 and tankstelle
2024-06-06 12:53:49 +02:00
teutat3s
b93608a8fa
metronom: add promtail, prometheus node-exporter
...
configure wireguard to push logs to and scrape metrics from flora-6
open firewall for node-exporter port on wg-ssh interface
2024-06-06 12:52:55 +02:00
teutat3s
6143f56c01
flake: use DNS hostnames for deploy-rs
2024-06-06 12:50:24 +02:00
teutat3s
008e14f2d2
mail: add missing NixOS module to metronom
2024-06-06 12:49:58 +02:00
teutat3s
509a40b829
Merge pull request 'update mastodon, matrix-synapse, nextcloud, php, ruby, and others' ( #201 ) from chore/updates into main
...
Reviewed-on: #201
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
2024-06-06 09:21:12 +00:00
teutat3s
6aa18b0a2c
flake: update inputs
...
Flake checks / Check (pull_request) Successful in 14m32s
• Updated input 'element-themes':
'github:aaronraimist/element-themes/2368b58c16d2c4aabb82a245f036d228cbb6e5f5' (2024-02-12)
→ 'github:aaronraimist/element-themes/6ed3a981191cbd59f03ea530f16e096b9a4c278c' (2024-05-28)
• Updated input 'flake-parts':
'github:hercules-ci/flake-parts/8dc45382d5206bd292f9c2768b8058a8fd8311d9' (2024-05-16)
→ 'github:hercules-ci/flake-parts/2a55567fcf15b1b1c7ed712a2c6fadaec7412ea8' (2024-06-01)
• Updated input 'flake-parts/nixpkgs-lib':
'50eb7ecf4ceb9ceca17d
2024-06-05 02:08:13 +02:00
teutat3s
10ed117dfe
Merge pull request 'loki, prometheus, promtail should connect via wireguard' ( #200 ) from loki-prometheus-via-wireguard into main
...
Reviewed-on: #200
Reviewed-by: Hendrik Sokolowski <hensoko@noreply.git.pub.solar>
Reviewed-by: b12f <b12f@noreply.git.pub.solar>
2024-06-05 00:04:40 +00:00
teutat3s
e93a56e594
nginx: use square brackets for IPv6 address
Flake checks / Check (pull_request) Successful in 4m0s
2024-06-05 01:59:54 +02:00
teutat3s
27c239b985
loki: allow port 3100 in firewall for wg-ssh interface
2024-06-05 01:59:44 +02:00
teutat3s
61ea0ad7c2
networking: add internal IPv6 wireguard IPs to /etc/hosts
Flake checks / Check (pull_request) Successful in 3m8s
2024-06-03 12:33:51 +02:00
teutat3s
8f1b932fdc
docs: update unlocking ZFS pool
Flake checks / Check (pull_request) Successful in 3m43s
2024-06-03 12:30:08 +02:00
teutat3s
56f692740e
networking: use *.wg.pub.solar in /etc/hosts
...
instead of overriding IPs for existing DNS records, to reduce suprises
when DNS records are different depending on the host.
Add metronom + tankstelle internal wireguard IPs, too.
2024-06-03 12:28:33 +02:00
teutat3s
0286719dce
dns: add internal *.wg.pub.solar VPN records
2024-06-01 16:51:49 +02:00
teutat3s
20ebf92f1f
loki, promtail, prometheus: remove basic auth, use
...
wireguard to secure connections
2024-06-01 16:51:14 +02:00
teutat3s
a10027ed21
Merge pull request 'Init mail.pub.solar' ( #196 ) from feat/mail into main
...
Reviewed-on: #196
Reviewed-by: teutat3s <teutat3s@noreply.git.pub.solar>
2024-05-31 15:22:28 +00:00
teutat3s
8f46e22636
docs: updates for metronom / mail
Flake checks / Check (pull_request) Successful in 4m8s
2024-05-31 16:52:04 +02:00
teutat3s
0038be3d2c
metronom: use wireguard IP for SSH, lock down SSH
...
port access to wireguard only
2024-05-31 16:52:04 +02:00
teutat3s
9a9dccf5bb
mail: move NixOS module to modules
2024-05-31 16:52:04 +02:00
teutat3s
fcd9af314e
mail: update teutat3s password
2024-05-31 16:52:04 +02:00
teutat3s
c5dfb472f8
style: treefmt
2024-05-31 16:52:04 +02:00
teutat3s
9d8026a31a
mail(treewide): update mail.greenbaum.zone -> mail.pub.solar
2024-05-31 16:52:04 +02:00
teutat3s
1ca1168d7a
mail: switch to mail.pub.solar
2024-05-31 16:52:04 +02:00
teutat3s
a3f7afd7a0
docs: add metronom to deploy docs, style: format
2024-05-31 16:52:03 +02:00
teutat3s
a424152f94
dns: add test mail records for metronom.pub.solar
...
DKIM, DMARC, SPF, MX
2024-05-31 16:52:03 +02:00
teutat3s
b6f64a1e04
mail: add more @pub.solar mail accounts
2024-05-31 16:52:03 +02:00
teutat3s
9635367c82
dns: add metronom.pub.solar
2024-05-31 16:52:03 +02:00
Benjamin Yule Bädorf
3bcdd33b5a
deploy: use system from host configuration
2024-05-31 16:52:03 +02:00
Hendrik Sokolowski
af233793fb
initial work on mail
2024-05-31 16:52:01 +02:00
teutat3s
Benjamin Yule Bädorf
Hendrik Sokolowski