Benjamin Yule Bädorf
ad1ea4a49e
All checks were successful
Flake checks / Check (pull_request) Successful in 8m11s
The system-wide SSH server was hidden behind a wireguard proxy for security reasons, but since forgejo was using it, git pushes and pulls got broken for people without wireguard access. These config changes make sure forgejo starts its built-in SSH server on port 22, which is then allowed to be accessed from the open internet in the firewall config. |
||
|---|---|---|
| .forgejo/workflows | ||
| docs | ||
| hosts | ||
| lib | ||
| logins | ||
| modules | ||
| overlays | ||
| secrets | ||
| terraform | ||
| .envrc | ||
| .git-blame-ignore-revs | ||
| .gitignore | ||
| flake.lock | ||
| flake.nix | ||
| README.md | ||
The pub.solar infrastructure
This repository contains almost all of the configuration for the whole pub.solar infrastructure. Our goal is to have everything, from host configurations to Terraform DNS in this repository.
The architecture we are working towards is a vast simplification of what it was before: one dedicated Hetzner server running NixOS with all services. Offsite backups go to several different locations with restic.
Contributing
If you'd like to contribute, it makes sense to talk to the crew on Matrix via #hakken. We can help figuring out how things work and can make sure your ideas fit the pub.solar philosophy. Of course popping a pull request is always celebrated.
To start, see how to get a development shell.