Commit graph

26 commits

Author SHA1 Message Date
a8ecf3d683 Remove nextcloud.grzb.de mapping 2023-11-09 23:10:53 +01:00
6b447c40aa Migrate Mastodon to NixOS 2023-11-09 23:10:53 +01:00
67c5a733ab Increase worker_connections and set worker_processes to auto 2023-11-09 23:10:53 +01:00
f0368c9a61 Set locations priority for matrix reverse proxy 2023-11-09 23:10:53 +01:00
8bb1c5853b Enable sliding-sync for matrix-synapse 2023-11-09 23:10:53 +01:00
05883ca9a6 Also listen on "::1" 2023-11-09 23:10:53 +01:00
5813640e73 Enable dehydrated device feature for element-web client 2023-11-09 23:10:53 +01:00
ffa09f900b Change Content-Security-Policy "frame-ancestors" from "none" to "self"
Fixes downloads in element-web
2023-11-09 23:10:53 +01:00
131fc871b7 Set real IP from local proxy 2023-11-09 23:10:52 +01:00
ce5e907ed8 Setup paperless host and reverse proxy for acme http challange 2023-11-09 23:10:52 +01:00
4c918ad074 Set resolv.conf file manually for uptime-kuma container due to a bug 2023-11-09 23:10:52 +01:00
eba7c018ed Use only snake case for element-web config since camel case is deprecated 2023-11-09 23:10:52 +01:00
21c0b67ac2 Configure TLS settings on mail relay 2023-11-09 23:10:52 +01:00
eb84404a10 Enable TLS on mail relay 2023-11-09 23:10:52 +01:00
cae1284094 Forward port 80 to mail servers for the http acme challange 2023-11-09 23:10:52 +01:00
6c6cfb6da8 Use snat rule instead if masquerade for wireguard nat 2023-11-09 23:10:52 +01:00
cd938d5020 Use another subnet for WireGuard tunnel as is conflicts with the openstack internal subnet 2023-11-09 23:10:52 +01:00
3723b4edf2 Fix WireGuard nat rules 2023-11-09 23:10:52 +01:00
e0d1e17bbb Change mail-1 wireguard port as it is already used for STS setup 2023-11-09 23:10:52 +01:00
b359ec8644 Use host resolv.conf in container 2023-11-09 23:10:52 +01:00
d1f2b13232 Add missing wireguard-tools dependency 2023-11-09 23:10:52 +01:00
03719f5bf8 Pass libnftables.so.1 path into python script 2023-11-09 23:10:52 +01:00
ea11e41005 Add wireguard-nat-nftables python script 2023-11-09 23:10:52 +01:00
34b8dcef9c Add valkyrie host 2023-11-09 23:10:52 +01:00
f3385b48a2 Enable firewall 2023-11-09 23:10:52 +01:00
4a802ab44d Setup mail server and restructure some things 2023-11-09 23:10:52 +01:00