june/fi-nix-infra
Watch
1
0
Fork
You've already forked fi-nix-infra
 0
forked from fi/nix-infra
Code Pull requests Activity
344 commits 1 branch 0 tags 1.5 MiB
Commit graph

344 commits

This branch
This branch
All branches
Author SHA1 Message Date
fi
3b4cd0651f
 		Update mastodon to 4.5.10 2026-05-20 16:52:34 +02:00
fi
a01a891495
 		Migrate matrix to sops-nix 2026-05-18 21:56:57 +02:00
Fiona Grzebien
dc965c3329
 		Migrate mastodon to sops-nix 2026-05-17 18:55:08 +02:00
Fiona Grzebien
88ce33c504
 		Add secrets for mastodon 2026-05-17 03:45:18 +02:00
Fiona Grzebien
8784537a38
 		Migrate lifeline to sops-nix 2026-05-17 03:25:55 +02:00
Fiona Grzebien
5d1fc8bbc3
 		Migrate keycloak to sops-nix 2026-05-17 03:14:42 +02:00
Fiona Grzebien
985c4c9040
 		Migrate jellyfin to sops-nix 2026-05-17 03:01:07 +02:00
Fiona Grzebien
74f35e704c
 		Migrate forgejo to sops-nix 2026-05-17 02:56:18 +02:00
Fiona Grzebien
679f815d60
 		Add sops.nix to every host 2026-05-17 02:41:04 +02:00
Fiona Grzebien
408bbe2de2
 		Add all host age keys 2026-05-17 02:33:39 +02:00
Fiona Grzebien
b3f6e37765
 		Remove mail-2 2026-05-17 02:12:42 +02:00
Fiona Grzebien
8d107286a9
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/30f30521f3fce93c4c22bb43941cdf8e2d90d311?narHash=sha256-/VER73JyDAsvWXmEk6Qph%2Bq1cXLof4iXtxgwKsj3cP8%3D' (2026-05-16)
  → 'github:NixOS/nixpkgs/ff5e747c5f45865599ba7387244212420558e83c?narHash=sha256-z1PIyRIm5nlh6sB4I4ObT42O6IT5zuFzQK0RtvRoL/c%3D' (2026-05-16)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/183fe40a77b6860ddd8ed01433d0f4f2f5343e7b?narHash=sha256-W9Dm45lszeihc0BZIHeLMVAJzOETAZtgQQbPhqyLPA0%3D' (2026-05-16)
  → 'github:NixOS/nixpkgs/b6aac1076920329e7863e9fb607d4d1811ea16f3?narHash=sha256-gnglqTdKUK1UlKfq%2BZRXmxWW%2BMRhbpOi3DzjTp2zqRU%3D' (2026-05-16)
 2026-05-17 01:26:48 +02:00
Fiona Grzebien
5b44c4516c
 		Remove hydra host 2026-05-17 01:24:09 +02:00
Fiona Grzebien
a28f7a5848
 		Migrate coturn to sops-nix 2026-05-17 01:18:39 +02:00
Fiona Grzebien
bff3401ada
 		Migrate ikiwiki to sops-nix 2026-05-17 01:04:54 +02:00
Fiona Grzebien
668f2ef4d8
 		Add ssh-to-age 2026-05-16 23:41:15 +02:00
Fiona Grzebien
37df75b8cb
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/a3c34a1dd63140ab2150ebb4fa290bbbae58193b?narHash=sha256-wVKu7ZYV3ikh7RVDY1TVlaKwPTFvfkYnOzQGn3IqT4o%3D' (2026-05-15)
  → 'github:NixOS/nixpkgs/30f30521f3fce93c4c22bb43941cdf8e2d90d311?narHash=sha256-/VER73JyDAsvWXmEk6Qph%2Bq1cXLof4iXtxgwKsj3cP8%3D' (2026-05-16)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/b0415a300a8d2daf19019ef418f0b019ee38cf47?narHash=sha256-NZ9yg%2BVJy6RftGD3YXeqCEEVsPZH9hPu6yWm/bAuqLM%3D' (2026-05-15)
  → 'github:NixOS/nixpkgs/183fe40a77b6860ddd8ed01433d0f4f2f5343e7b?narHash=sha256-W9Dm45lszeihc0BZIHeLMVAJzOETAZtgQQbPhqyLPA0%3D' (2026-05-16)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/758b562bc257084aef30b8e3efbdd61d292806c3?narHash=sha256-BxYhb8H0aVtiM1kGRt%2BS49NbsJMUMIHvOXxziE9u0nY%3D' (2026-05-15)
  → 'github:NixOS/nixpkgs/5a51fe22e18a6ce886b3cffa4c255378c151323c?narHash=sha256-FqqcYr0c5in/HRL5bkRWykAGp/Q10Vj/zUiSr1P8URE%3D' (2026-05-16)
• Added input 'sops-nix':
    'github:Mic92/sops-nix/c591bf665727040c6cc5cb409079acb22dcce33c?narHash=sha256-VfGRo1qTBKOe3s2gOv8LSoA6Fk19PvBlwQ1ECN0Evn8%3D' (2026-05-05)
• Added input 'sops-nix/nixpkgs':
    follows 'nixpkgs'
 2026-05-16 22:50:29 +02:00
Fiona Grzebien
2a8f0b0564
 		Add sops-nix 2026-05-16 22:49:13 +02:00
Fiona Grzebien
b2079ab04d
 		Add mastodon default patches for yarn-4.14-support.patch 2026-05-16 21:25:16 +02:00
Fiona Grzebien
80916c6b85
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/7fea5ede44b70af67136a82b41e39878cfb3a51b?narHash=sha256-adRHzYRN0huy51aAykoXC4xxBe84AupPMp81lmoNJHM%3D' (2026-04-30)
  → 'github:NixOS/nixpkgs/a3c34a1dd63140ab2150ebb4fa290bbbae58193b?narHash=sha256-wVKu7ZYV3ikh7RVDY1TVlaKwPTFvfkYnOzQGn3IqT4o%3D' (2026-05-15)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/6d457375d24d7d6c8b537a161660173ca225dfdf?narHash=sha256-/H8BBZdwWPVS9mzK5a8XskmLI%2BwMf6Zf8d22ZLeWSc4%3D' (2026-04-30)
  → 'github:NixOS/nixpkgs/b0415a300a8d2daf19019ef418f0b019ee38cf47?narHash=sha256-NZ9yg%2BVJy6RftGD3YXeqCEEVsPZH9hPu6yWm/bAuqLM%3D' (2026-05-15)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/417335fe04072fe234d9a566b72d7955df681844?narHash=sha256-XqqAel6imMLIA8ZeX5CNydzOaokD6GIoUf02DuFeWr4%3D' (2026-04-30)
  → 'github:NixOS/nixpkgs/758b562bc257084aef30b8e3efbdd61d292806c3?narHash=sha256-BxYhb8H0aVtiM1kGRt%2BS49NbsJMUMIHvOXxziE9u0nY%3D' (2026-05-15)
 2026-05-15 22:38:20 +02:00
fi
df36846fb2
 		Update element-web to 1.12.17 2026-05-01 16:35:54 +02:00
fi
cbfe669ad4
 		Update element-admin to 0.1.11 2026-05-01 16:33:25 +02:00
fi
618b6ba170
 		Update mastodon to 4.5.9 2026-05-01 16:21:22 +02:00
fi
9ba87803fc
 		Add /.well-known/matrix/support endpoint 2026-05-01 16:18:28 +02:00
fi
ae2a4c91fd
 		Set LIVEKIT_FULL_ACCESS_HOMESERVERS 2026-05-01 02:40:31 +02:00
fi
3a4ce8d0eb
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/0aecba5a03727e1ac2d66378907d9a6e9c8266d0' (2026-04-03)
  → 'github:NixOS/nixpkgs/7fea5ede44b70af67136a82b41e39878cfb3a51b' (2026-04-30)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/942d1c86a6642bff0c4a440d30a7669a7a18a903' (2026-04-03)
  → 'github:NixOS/nixpkgs/6d457375d24d7d6c8b537a161660173ca225dfdf' (2026-04-30)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/0eac666efaa8a9afea2821f9efc7921b4ef39b4e' (2026-04-03)
  → 'github:NixOS/nixpkgs/417335fe04072fe234d9a566b72d7955df681844' (2026-04-30)
 2026-05-01 01:50:20 +02:00
fi
f73990a427
 		WIP 2026-04-07 22:59:15 +02:00
fi
f19436b178
 		Allow proxy protocol to reverse proxy 2026-04-07 22:03:15 +02:00
fi
fe86c128ed
 		Put matrix federation behind reverse proxy 2026-04-07 21:32:12 +02:00
fi
44215ecfc9
 		Remove obsolete configuration 2026-04-05 23:59:35 +02:00
fi
654a8459eb
 		Route IPv6 traffic via valkyrie 2026-04-05 23:50:38 +02:00
fi
d793308ebe
 		Add stardew ssh key 2026-04-04 00:53:32 +02:00
fi
051571d200
 		Add default grafana secret key for metrics-nekomesh 2026-04-04 00:02:07 +02:00
fi
5e2c28fd13
 		Update mastodon to 4.5.8 2026-04-03 22:58:44 +02:00
fi
39be09bb6b
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/56ed9a39b84feaee9624111dc86869d19f4c22f3' (2026-03-30)
  → 'github:NixOS/nixpkgs/0aecba5a03727e1ac2d66378907d9a6e9c8266d0' (2026-04-03)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/98ce05a593c5d9655ddbd09fd81f7679381b5392' (2026-03-30)
  → 'github:NixOS/nixpkgs/942d1c86a6642bff0c4a440d30a7669a7a18a903' (2026-04-03)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/318977b8e175faba256cb35e0ca6810c7d87edf2' (2026-03-30)
  → 'github:NixOS/nixpkgs/0eac666efaa8a9afea2821f9efc7921b4ef39b4e' (2026-04-03)
 2026-04-03 22:51:49 +02:00
fi
17ddc2f9c9
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/08ebc444a070153227d6f45acf979f4d5f1f97f9' (2026-02-11)
  → 'github:NixOS/nixpkgs/56ed9a39b84feaee9624111dc86869d19f4c22f3' (2026-03-30)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/8605a9be3795437e3717dab6c542d2d571369e70' (2026-02-11)
  → 'github:NixOS/nixpkgs/98ce05a593c5d9655ddbd09fd81f7679381b5392' (2026-03-30)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/d9ca3a4b73f19ea147c9d977d3dde8f612ac648f' (2026-02-11)
  → 'github:NixOS/nixpkgs/318977b8e175faba256cb35e0ca6810c7d87edf2' (2026-03-30)
• Updated input 'simple-nixos-mailserver':
    'gitlab:simple-nixos-mailserver/nixos-mailserver/23f0a53ca6e58e61e1ea2b86791c69b79c91656d' (2025-12-24)
  → 'gitlab:simple-nixos-mailserver/nixos-mailserver/25e6dbb8fca3b6e779c5a46fd03bd760b2165bb5' (2026-03-19)
• Updated input 'simple-nixos-mailserver/flake-compat':
    'github:edolstra/flake-compat/f387cd2afec9419c8ee37694406ca490c3f34ee5' (2025-10-27)
  → 'github:edolstra/flake-compat/5edf11c44bc78a0d334f6334cdaf7d60d732daab' (2025-12-29)
• Updated input 'simple-nixos-mailserver/git-hooks':
    'github:cachix/git-hooks.nix/7275fa67fbbb75891c16d9dee7d88e58aea2d761' (2025-11-16)
  → 'github:cachix/git-hooks.nix/8baab586afc9c9b57645a734c820e4ac0a604af9' (2026-03-07)
• Updated input 'simple-nixos-mailserver/nixpkgs':
    'github:NixOS/nixpkgs/a320ce8e6e2cc6b4397eef214d202a50a4583829' (2025-11-24)
  → 'github:NixOS/nixpkgs/826430a188181a750ffa5948daff334039c5d741' (2026-03-18)
 2026-03-30 22:25:39 +02:00
fi
9862a9d21b
 		Update element-web to 1.12.10 2026-02-11 18:02:31 +01:00
fi
459ac4c314
 		Update mastodon to 4.5.6 and remove fedi fetcher 2026-02-11 17:24:44 +01:00
fi
6daef62b60
 		flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/032a1878682fafe829edfcf5fdfad635a2efe748' (2025-11-27)
  → 'github:nix-community/nixos-generators/8946737ff703382fda7623b9fab071d037e897d5' (2026-01-30)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/044f759a4f4629f2be41e59b859753a091e3c089' (2026-01-04)
  → 'github:NixOS/nixpkgs/08ebc444a070153227d6f45acf979f4d5f1f97f9' (2026-02-11)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/4220734816a0091405c33fe4c113be021c8e9c34' (2026-01-05)
  → 'github:NixOS/nixpkgs/8605a9be3795437e3717dab6c542d2d571369e70' (2026-02-11)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/1e46161ce72e20c156dd2225d7517421236c0f22' (2026-01-05)
  → 'github:NixOS/nixpkgs/d9ca3a4b73f19ea147c9d977d3dde8f612ac648f' (2026-02-11)
 2026-02-11 17:16:34 +01:00
fi
98b3e14bd6 Host element-admin on web-public-2 2026-01-18 19:36:46 +01:00
fi
4bfcfe355c Expose matrix admin api on management VPN 2026-01-18 17:56:04 +01:00
fi
8fe546c3fe Enable MAS admin cli 2026-01-18 17:41:21 +01:00
fi
770ba36ffc Remove invalid password complexity setting in MAS config 
Should be a value between 0 and 4. Default is 3.
 2026-01-18 17:19:30 +01:00
fi
399f53fc3e flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/f376a52d0dc796aec60b5606a2676240ff1565b9' (2025-12-08)
  → 'github:NixOS/nixpkgs/044f759a4f4629f2be41e59b859753a091e3c089' (2026-01-04)
• Updated input 'nixpkgs-master':
    'github:NixOS/nixpkgs/a0ea537a4fc4c49fb1e226317829c8b32ed95d0e' (2025-12-08)
  → 'github:NixOS/nixpkgs/4220734816a0091405c33fe4c113be021c8e9c34' (2026-01-05)
• Updated input 'nixpkgs-unstable':
    'github:NixOS/nixpkgs/fc2de1563f89f0843eba27f14576d261df0e3b80' (2025-12-08)
  → 'github:NixOS/nixpkgs/1e46161ce72e20c156dd2225d7517421236c0f22' (2026-01-05)
• Updated input 'simple-nixos-mailserver':
    'gitlab:simple-nixos-mailserver/nixos-mailserver/a14fe3b293ec2720e5b7fc72ad136d22967e12ba' (2025-11-26)
  → 'gitlab:simple-nixos-mailserver/nixos-mailserver/23f0a53ca6e58e61e1ea2b86791c69b79c91656d' (2025-12-24)
 2026-01-06 00:25:12 +01:00
June
954f7d4d08
 		tweak forgejo service configuration a bit making it nicer 
- Enable Git LFS support, since it's nice to have.
- Enable offline mode to avoid relying on CDNs (and to not use
  Gravatar).
- Enable notification mails for repo activity.
- Put setting for default repo units into "repository" category as the
  "repo" category doesn't exist.
- Also disable all repo units except code, as they mostly aren't needed
  for private repos and can be easily enabled on-demand.
 2026-01-05 20:21:52 +01:00
fi
3fd2e91363 Increase mastodon nginx client_max_body_size to 200MB 2025-12-18 03:08:05 +01:00
fi
0dc30f442f Build with setuptools 2025-12-08 23:44:19 +01:00
fi
b4f63bc010 change services.nextcloud.settings.mail_smtpauth to boolean 2025-12-08 23:36:35 +01:00
fi
3868f102fa Bump mailserver stateVersion to 3 2025-12-08 23:23:17 +01:00
fi
fde35d287a replace services.postfix.extraConfig with services.postfix.settings.main option 2025-12-08 22:37:13 +01:00