fi/nix-infra
1
1
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
141 commits 3 branches 0 tags 1.1 MiB
Commit graph

141 commits

This branch
This branch
All branches
Author SHA1 Message Date
fi 1adebca1c2 Open firewall for jellyfin http port 2024-11-20 05:46:40 +01:00
fi fca31e5836 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/33e938c7823e47a787ad4f76003d14ff92ad96dd' (2023-11-07)
  → 'github:NixOS/nixpkgs/1d55765508b8316798429875712dc1ef5e62a2fa' (2023-11-10)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/cfbb29d76949ae53c457f152c52c173ea4bdd862' (2023-11-07)
  → 'github:NixOS/nixpkgs/714e527a726c9613fca8e13586a1b19198d68d9b' (2023-11-10)
 2024-11-20 05:46:40 +01:00
fi 31276014aa flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/5896110a4e861bf2e675a3c3d8a171793fce2599' (2023-10-29)
  → 'github:NixOS/nixpkgs/33e938c7823e47a787ad4f76003d14ff92ad96dd' (2023-11-07)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/4e43dd49630303b00120c11d00d4fb01bb40188d' (2023-10-29)
  → 'github:NixOS/nixpkgs/cfbb29d76949ae53c457f152c52c173ea4bdd862' (2023-11-07)
 2024-11-20 05:46:40 +01:00
fi cf16f6ac6e Update mastodon-nekoverse-patches 2024-11-20 05:46:40 +01:00
fi b48a6d4727 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/21443a102b1a2f037d02e1d22e3e0ffdda2dbff9' (2023-10-21)
  → 'github:NixOS/nixpkgs/5896110a4e861bf2e675a3c3d8a171793fce2599' (2023-10-29)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/8dfad603247387df1df4826b8bea58efc5d012d8' (2023-10-22)
  → 'github:NixOS/nixpkgs/4e43dd49630303b00120c11d00d4fb01bb40188d' (2023-10-29)
 2024-11-20 05:46:40 +01:00
fi a0b626de20 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
  → 'github:NixOS/nixpkgs/21443a102b1a2f037d02e1d22e3e0ffdda2dbff9' (2023-10-21)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)
  → 'github:NixOS/nixpkgs/8dfad603247387df1df4826b8bea58efc5d012d8' (2023-10-22)
 2024-11-20 05:46:40 +01:00
fi 8de22e8e11 Bump element-web to v1.11.47 2024-11-20 05:46:40 +01:00
fi e679a2634b flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/22723a1d7deab53e5c1022906089e4247a5d3e77' (2023-10-09)
  → 'github:NixOS/nixpkgs/0e1cff585c1a85aeab059d3109f66134a8f76935' (2023-10-15)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/38aa96fc39c9719994f08100f791c27d31ee7892' (2023-10-09)
  → 'github:NixOS/nixpkgs/982b24c40e743793c966b47b3bb3699881489ae0' (2023-10-15)
 2024-11-20 05:46:40 +01:00
fi 002421bd67 Add searx host 2024-11-20 05:46:40 +01:00
fi 42de10657d Use OpenSSH config from CCCHH nix-infra repo 2024-11-20 05:46:40 +01:00
fi 237197f5e7 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/8be69c1764f58e07099e4a24b926f49bbada8c7f' (2023-10-09)
  → 'github:NixOS/nixpkgs/22723a1d7deab53e5c1022906089e4247a5d3e77' (2023-10-09)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/5a9c737c587d2c34d63c5b3cb53c6ab0705bdf4f' (2023-10-09)
  → 'github:NixOS/nixpkgs/38aa96fc39c9719994f08100f791c27d31ee7892' (2023-10-09)
 2024-11-20 05:46:40 +01:00
fi c4b1fba0e2 Use stable channel and use helper function for acme challenge proxy 2024-11-20 05:46:40 +01:00
fi 5a33e2803c Update element-web and clean up configuration 2024-11-20 05:46:40 +01:00
fi 208ddf869d flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/de9b8eb55b195f318eb839351b83b3560a990169' (2023-10-07)
  → 'github:NixOS/nixpkgs/8be69c1764f58e07099e4a24b926f49bbada8c7f' (2023-10-09)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/b7a3aaae3859cd1ffd4c4fd850bf45d0304f9033' (2023-10-07)
  → 'github:NixOS/nixpkgs/5a9c737c587d2c34d63c5b3cb53c6ab0705bdf4f' (2023-10-09)
 2024-11-20 05:46:40 +01:00
fi 3d529a2e79 Remove nextcloud.grzb.de mapping 2024-11-20 05:46:40 +01:00
fi 8721f9b3a2 Migrate Mastodon to NixOS 2024-11-20 05:46:40 +01:00
fi 6c93696fb0 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/e49c28b3baa3a93bdadb8966dd128f9985ea0a09' (2023-10-04)
  → 'github:NixOS/nixpkgs/de9b8eb55b195f318eb839351b83b3560a990169' (2023-10-07)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/349bdd9653c42f1793d338b43aefe08883c5ebee' (2023-10-04)
  → 'github:NixOS/nixpkgs/b7a3aaae3859cd1ffd4c4fd850bf45d0304f9033' (2023-10-07)
 2024-11-20 05:46:40 +01:00
fi 6fb5c186fb flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/8ee78470029e641cddbd8721496da1316b47d3b4' (2023-09-04)
  → 'github:nix-community/nixos-generators/150f38bd1e09e20987feacb1b0d5991357532fb5' (2023-09-30)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/ce210c81d3677233bedc9b70c70ab6d3e7f828f8' (2023-09-29)
  → 'github:NixOS/nixpkgs/e49c28b3baa3a93bdadb8966dd128f9985ea0a09' (2023-10-04)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/cdd726e1deb44c031ee8975528d6b283ed8cf021' (2023-09-29)
  → 'github:NixOS/nixpkgs/349bdd9653c42f1793d338b43aefe08883c5ebee' (2023-10-04)
 2024-11-20 05:46:40 +01:00
fi 611d6a1031 Increase worker_connections and set worker_processes to auto 2024-11-20 05:46:40 +01:00
fi 50a28738ae Set locations priority for matrix reverse proxy 2024-11-20 05:46:40 +01:00
fi 6fcdfe2a84 Enable sliding-sync for matrix-synapse 2024-11-20 05:46:40 +01:00
fi 40bcd7ae4f flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/8ee78470029e641cddbd8721496da1316b47d3b4' (2023-09-04)
  → 'github:nix-community/nixos-generators/150f38bd1e09e20987feacb1b0d5991357532fb5' (2023-09-30)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/53d337b63c8f9d7e0f8709cae0008a9655bee33e' (2023-09-19)
  → 'github:NixOS/nixpkgs/ef8e9997fcb37d5c8372dc1349185bd0d31752a6' (2023-10-05)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/089313d7c7c864b21648d78fb8700062dafab1f2' (2023-09-18)
  → 'github:NixOS/nixpkgs/e462c9172c685f0839baaa54bb5b49276a23dab7' (2023-10-06)
 2024-11-20 05:46:40 +01:00
fi acff45ec6b Also listen on "::1" 2024-11-20 05:46:40 +01:00
fi b5c2206a4e Enable dehydrated device feature for element-web client 2024-11-20 05:46:40 +01:00
fi 2ac5dd8b5d Change Content-Security-Policy "frame-ancestors" from "none" to "self" 
Fixes downloads in element-web
 2024-11-20 05:46:40 +01:00
fi 16bff59994 Set real IP from local proxy 2024-11-20 05:46:40 +01:00
fi 894694229a Setup paperless host and reverse proxy for acme http challange 2024-11-20 05:46:40 +01:00
fi e7259ca980 Set resolv.conf file manually for uptime-kuma container due to a bug 2024-11-20 05:46:40 +01:00
fi d18fe31991 Use only snake case for element-web config since camel case is deprecated 2024-11-20 05:46:40 +01:00
fi f941aa1c01 Configure TLS settings on mail relay 2024-11-20 05:46:40 +01:00
fi d0b153d112 Enable TLS on mail relay 2024-11-20 05:46:40 +01:00
fi b4df0351c5 Forward port 80 to mail servers for the http acme challange 2024-11-20 05:46:40 +01:00
fi 6da99baf6b Use snat rule instead if masquerade for wireguard nat 2024-11-20 05:46:40 +01:00
fi 8e4202f579 Use a less generic nftables table name 2024-11-20 05:46:40 +01:00
fi f835277ef0 Use another subnet for WireGuard tunnel as is conflicts with the openstack internal subnet 2024-11-20 05:46:40 +01:00
fi ebc5b0bb29 Add tcpdump to default packages 2024-11-20 05:46:40 +01:00
fi 5b8d0943fc Fix WireGuard nat rules 2024-11-20 05:46:40 +01:00
fi 8e153de225 Change mail-1 wireguard port as it is already used for STS setup 2024-11-20 05:46:40 +01:00
fi bbe382c0f2 Use host resolv.conf in container 2024-11-20 05:46:40 +01:00
fi fec97bb146 Add missing wireguard-tools dependency 2024-11-20 05:46:40 +01:00
fi 0f3e7771a5 Pass libnftables.so.1 path into python script 2024-11-20 05:46:40 +01:00
fi 93924044c4 Add wireguard-nat-nftables python script 2024-11-20 05:46:40 +01:00
fi e35df8b0f1 Add valkyrie host 2024-11-20 05:46:40 +01:00
fi fd7b411ee4 Enable firewall 2024-11-20 05:46:40 +01:00
fi ba43f2ed5c Setup mail server and restructure some things 2024-11-20 05:46:40 +01:00
fi 502e5194dc Update flake.lock 2024-11-20 05:46:40 +01:00
fi 6baf116c50 Just do the nginx proxy_protocol listen in extraConfig and use stable packages 2024-11-20 05:46:40 +01:00
fi 3b04399847 Bump element-web to v1.11.40 2024-11-20 05:46:40 +01:00
fi 8ca3fb0ae2 Bump flake.lock 2024-11-20 05:46:40 +01:00
fi a81093890c Add matrix-synapse host 2024-11-20 05:46:40 +01:00