june/fi-nix-infra
1
0
Fork 0
forked from fi/nix-infra
Code Pull requests Activity
169 commits 1 branch 0 tags 1.5 MiB
Commit graph

169 commits

This branch
This branch
All branches
Author SHA1 Message Date
fi
9a64012393
 		Also listen on "::1" 2023-11-09 23:10:53 +01:00
fi
ab8a9c39dc
 		Enable dehydrated device feature for element-web client 2023-11-09 23:10:53 +01:00
fi
35119a2a8e
 		Change Content-Security-Policy "frame-ancestors" from "none" to "self" 
Fixes downloads in element-web
 2023-11-09 23:10:53 +01:00
fi
e8427dc81d
 		Set real IP from local proxy 2023-11-09 23:10:52 +01:00
fi
c1e74a4494
 		Setup paperless host and reverse proxy for acme http challange 2023-11-09 23:10:52 +01:00
fi
a2855162eb
 		Set resolv.conf file manually for uptime-kuma container due to a bug 2023-11-09 23:10:52 +01:00
fi
440251d2fc
 		Use only snake case for element-web config since camel case is deprecated 2023-11-09 23:10:52 +01:00
fi
d036d4a167
 		Configure TLS settings on mail relay 2023-11-09 23:10:52 +01:00
fi
9815afffdb
 		Enable TLS on mail relay 2023-11-09 23:10:52 +01:00
fi
91bd9f3c1d
 		Forward port 80 to mail servers for the http acme challange 2023-11-09 23:10:52 +01:00
fi
215065aa6c
 		Use snat rule instead if masquerade for wireguard nat 2023-11-09 23:10:52 +01:00
fi
0d820c58af
 		Use a less generic nftables table name 2023-11-09 23:10:52 +01:00
fi
e3b6c9a2bc
 		Use another subnet for WireGuard tunnel as is conflicts with the openstack internal subnet 2023-11-09 23:10:52 +01:00
fi
4538bfb375
 		Add tcpdump to default packages 2023-11-09 23:10:52 +01:00
fi
e7fe3707ee
 		Fix WireGuard nat rules 2023-11-09 23:10:52 +01:00
fi
f67a75b07d
 		Change mail-1 wireguard port as it is already used for STS setup 2023-11-09 23:10:52 +01:00
fi
a30fd6d361
 		Use host resolv.conf in container 2023-11-09 23:10:52 +01:00
fi
ef036a6a18
 		Add missing wireguard-tools dependency 2023-11-09 23:10:52 +01:00
fi
de66b5931c
 		Pass libnftables.so.1 path into python script 2023-11-09 23:10:52 +01:00
fi
299d04142f
 		Add wireguard-nat-nftables python script 2023-11-09 23:10:52 +01:00
fi
667b1c256b
 		Add valkyrie host 2023-11-09 23:10:52 +01:00
fi
9cf5bd0469
 		Enable firewall 2023-11-09 23:10:52 +01:00
fi
ba93d164cf
 		Setup mail server and restructure some things 2023-11-09 23:10:52 +01:00
fi
4c382e629d
 		Update flake.lock 2023-11-09 23:10:52 +01:00
fi
1d8697b70a
 		Just do the nginx proxy_protocol listen in extraConfig and use stable packages 2023-11-09 23:10:52 +01:00
fi
cc93674cc4
 		Bump element-web to v1.11.40 2023-11-09 23:10:52 +01:00
fi
5f61e963a8
 		Bump flake.lock 2023-11-09 23:10:52 +01:00
fi
e93c605ebb
 		Add matrix-synapse host 2023-11-09 23:10:52 +01:00
fi
b7864a6798
 		Only run pipeline when specific RUN_JOB variable value is set 2023-11-09 23:10:52 +01:00
fi
1ab6eb6c94
 		Bump flake.lock 2023-11-09 23:10:52 +01:00
fi
8b6d09def8
 		Rename nixos-coturn to coturn and finish config 2023-11-09 23:10:52 +01:00
fi
d625f3f887
 		Add metrics host with Grafana and Prometheus 2023-11-09 23:10:52 +01:00
fi
b7bae9e9de
 		WIP grafana 2023-11-09 23:10:52 +01:00
fi
0fa4ca7521
 		Increase opcache.interned_strings_buffer PHP option 2023-11-09 23:10:52 +01:00
fi
70eb8625bc
 		Enable proxyprotocol for nitter host 2023-11-09 23:10:52 +01:00
fi
a4f3e68aac
 		Add netbox host 2023-11-09 23:10:52 +01:00
fi
61f2d8f07e
 		Fix hostname 2023-11-09 23:10:52 +01:00
fi
ad208c1870
 		Restrict allowedTCPPorts to port 8443 2023-11-09 23:10:52 +01:00
fi
c1bd4e3529
 		Add SMTP configuration to nextcloud and use an additional disk for the data 2023-11-09 23:10:52 +01:00
fi
3f9cdc0943
 		Set boot.growPartition = true 2023-11-09 23:10:52 +01:00
fi
aed6df2954
 		Improve Proxmox backup image generation 2023-11-09 23:10:52 +01:00
fi
0a5d070773
 		Add nextcloud host 2023-11-09 23:10:52 +01:00
fi
093a44edf4
 		Remove secret.nix from jellyfin imports 2023-11-09 23:10:52 +01:00
fi
5c63b5d1a3
 		Enable firewall and migrate Jellyfin to NixOS 2023-11-09 23:10:52 +01:00
fi
693c6da88a
 		Add jellyfin host 2023-11-09 23:10:52 +01:00
fi
8a16dd0af2
 		Enable console on serial port and print public ssh host key when booting 2023-11-09 23:10:52 +01:00
fi
6885c40c10
 		Use hacky workaround for enableACME check with a proxyProtocol listener 2023-11-09 23:10:52 +01:00
fi
2c23fb92c9
 		Set binary cache hint 2023-11-09 23:10:52 +01:00
fi
d9f6e2f51c
 		Bump flake.lock 2023-11-09 23:10:51 +01:00
fi
59a7e36838
 		Generate colmena and hydraJobs outputs from the same hosts attribute set 2023-11-09 23:10:51 +01:00