Commit graph

38 commits

Author SHA1 Message Date
yuri 6449ce17d4 Update mastodon to v4.2.1 2023-11-20 23:16:20 +01:00
yuri ada2072ed3 Update element-web to 1.11.49 2023-11-15 12:31:47 +01:00
yuri 06aa5ffc97 Update mastodon to 4.1.10 2023-11-15 12:31:28 +01:00
yuri 9240153c62 Add vapid public key 2023-11-15 12:18:23 +01:00
yuri cd2d708b98 Open firewall for jellyfin http port 2023-11-15 11:54:11 +01:00
yuri c437f4dcb0 Update mastodon-nekoverse-patches 2023-11-09 23:10:53 +01:00
yuri bcb8034311 Bump element-web to v1.11.47 2023-11-09 23:10:53 +01:00
yuri 2a77ae39bc Add searx host 2023-11-09 23:10:53 +01:00
yuri d18a4ee24b Use OpenSSH config from CCCHH nix-infra repo 2023-11-09 23:10:53 +01:00
yuri 27a6513e84 Use stable channel and use helper function for acme challenge proxy 2023-11-09 23:10:53 +01:00
yuri 9c0398a3c1 Update element-web and clean up configuration 2023-11-09 23:10:53 +01:00
yuri a8ecf3d683 Remove nextcloud.grzb.de mapping 2023-11-09 23:10:53 +01:00
yuri 6b447c40aa Migrate Mastodon to NixOS 2023-11-09 23:10:53 +01:00
yuri 67c5a733ab Increase worker_connections and set worker_processes to auto 2023-11-09 23:10:53 +01:00
yuri f0368c9a61 Set locations priority for matrix reverse proxy 2023-11-09 23:10:53 +01:00
yuri 8bb1c5853b Enable sliding-sync for matrix-synapse 2023-11-09 23:10:53 +01:00
yuri 05883ca9a6 Also listen on "::1" 2023-11-09 23:10:53 +01:00
yuri 5813640e73 Enable dehydrated device feature for element-web client 2023-11-09 23:10:53 +01:00
yuri ffa09f900b Change Content-Security-Policy "frame-ancestors" from "none" to "self"
Fixes downloads in element-web
2023-11-09 23:10:53 +01:00
yuri 131fc871b7 Set real IP from local proxy 2023-11-09 23:10:52 +01:00
yuri ce5e907ed8 Setup paperless host and reverse proxy for acme http challange 2023-11-09 23:10:52 +01:00
yuri 4c918ad074 Set resolv.conf file manually for uptime-kuma container due to a bug 2023-11-09 23:10:52 +01:00
yuri eba7c018ed Use only snake case for element-web config since camel case is deprecated 2023-11-09 23:10:52 +01:00
yuri 21c0b67ac2 Configure TLS settings on mail relay 2023-11-09 23:10:52 +01:00
yuri eb84404a10 Enable TLS on mail relay 2023-11-09 23:10:52 +01:00
yuri cae1284094 Forward port 80 to mail servers for the http acme challange 2023-11-09 23:10:52 +01:00
yuri 6c6cfb6da8 Use snat rule instead if masquerade for wireguard nat 2023-11-09 23:10:52 +01:00
yuri cd938d5020 Use another subnet for WireGuard tunnel as is conflicts with the openstack internal subnet 2023-11-09 23:10:52 +01:00
yuri f9971c842e Add tcpdump to default packages 2023-11-09 23:10:52 +01:00
yuri 3723b4edf2 Fix WireGuard nat rules 2023-11-09 23:10:52 +01:00
yuri e0d1e17bbb Change mail-1 wireguard port as it is already used for STS setup 2023-11-09 23:10:52 +01:00
yuri b359ec8644 Use host resolv.conf in container 2023-11-09 23:10:52 +01:00
yuri d1f2b13232 Add missing wireguard-tools dependency 2023-11-09 23:10:52 +01:00
yuri 03719f5bf8 Pass libnftables.so.1 path into python script 2023-11-09 23:10:52 +01:00
yuri ea11e41005 Add wireguard-nat-nftables python script 2023-11-09 23:10:52 +01:00
yuri 34b8dcef9c Add valkyrie host 2023-11-09 23:10:52 +01:00
yuri f3385b48a2 Enable firewall 2023-11-09 23:10:52 +01:00
yuri 4a802ab44d Setup mail server and restructure some things 2023-11-09 23:10:52 +01:00