]>
Git — Sourcephile - sourcephile-nix.git/log
Julien Moutinho [Sun, 30 Aug 2020 00:51:35 +0000 (02:51 +0200)]
nix: rename flakes to inputs
Julien Moutinho [Sat, 29 Aug 2020 01:21:19 +0000 (03:21 +0200)]
zfs: allow sending backup from losurdo to mermet
Julien Moutinho [Sat, 29 Aug 2020 00:58:56 +0000 (02:58 +0200)]
nginx: sourcephile.fr: www: fix redirection
Julien Moutinho [Sat, 29 Aug 2020 00:53:05 +0000 (02:53 +0200)]
zfs: increase zfs_arc_max to 1.5G
Julien Moutinho [Thu, 27 Aug 2020 20:39:29 +0000 (22:39 +0200)]
nix: polish shell exports
Julien Moutinho [Thu, 27 Aug 2020 16:33:58 +0000 (18:33 +0200)]
nix: re-add smartctl-tbw to the environment
Julien Moutinho [Thu, 27 Aug 2020 08:19:14 +0000 (10:19 +0200)]
syncoid: use a dedicated backup user
Julien Moutinho [Thu, 27 Aug 2020 04:39:30 +0000 (06:39 +0200)]
nix: fix minor things
Julien Moutinho [Thu, 27 Aug 2020 04:36:01 +0000 (06:36 +0200)]
nix: polish flake.nix
Julien Moutinho [Thu, 27 Aug 2020 04:32:01 +0000 (06:32 +0200)]
nftables: harden input checks on mermet
Julien Moutinho [Wed, 26 Aug 2020 18:16:59 +0000 (20:16 +0200)]
malloc: disable unstable scudo hardening
Julien Moutinho [Wed, 26 Aug 2020 18:15:44 +0000 (20:15 +0200)]
nix: fix PASSWORD_STORE_DIR
Julien Moutinho [Wed, 26 Aug 2020 01:23:05 +0000 (03:23 +0200)]
nftables: harden input checks on losurdo
Julien Moutinho [Tue, 25 Aug 2020 20:37:18 +0000 (22:37 +0200)]
doc: explain tributes in naming the machines
Julien Moutinho [Tue, 25 Aug 2020 20:36:36 +0000 (22:36 +0200)]
nix: disable fix for /etc/ld-nix.so.preload, too much rebuilds
Julien Moutinho [Tue, 25 Aug 2020 13:12:37 +0000 (15:12 +0200)]
nix: fix /etc/ld-nix.so.preload sharing
Julien Moutinho [Mon, 24 Aug 2020 23:49:59 +0000 (01:49 +0200)]
nix: update to latest nixpkgs-unstable
Julien Moutinho [Mon, 24 Aug 2020 22:02:14 +0000 (00:02 +0200)]
nix: remove old build rules
Julien Moutinho [Mon, 24 Aug 2020 21:53:13 +0000 (23:53 +0200)]
nix: remove pre-flake.nix residues
Julien Moutinho [Mon, 24 Aug 2020 14:21:47 +0000 (16:21 +0200)]
nix: remove no longer used nixpkgs/patches
Julien Moutinho [Thu, 13 Aug 2020 14:15:27 +0000 (16:15 +0200)]
nix: move to flake.nix
Julien Moutinho [Thu, 13 Aug 2020 12:10:08 +0000 (14:10 +0200)]
losurdo: remove dependency on nix-plugins
Julien Moutinho [Thu, 13 Aug 2020 09:32:20 +0000 (11:32 +0200)]
networking: losurdo
Julien Moutinho [Sun, 9 Aug 2020 04:34:40 +0000 (06:34 +0200)]
dovecot: update fts_xapian
Julien Moutinho [Sat, 8 Aug 2020 05:41:18 +0000 (07:41 +0200)]
biboumi: add service
Julien Moutinho [Wed, 5 Aug 2020 04:55:36 +0000 (06:55 +0200)]
prosody: wrap up coturn tests
Julien Moutinho [Wed, 5 Aug 2020 04:54:27 +0000 (06:54 +0200)]
environment: add networking tools
Julien Moutinho [Wed, 5 Aug 2020 04:52:36 +0000 (06:52 +0200)]
transmission: fix service
Julien Moutinho [Tue, 4 Aug 2020 05:40:29 +0000 (07:40 +0200)]
prosody: more tests of STUN
Julien Moutinho [Mon, 3 Aug 2020 22:20:16 +0000 (00:20 +0200)]
prosody: fix configuration
Julien Moutinho [Mon, 3 Aug 2020 06:59:01 +0000 (08:59 +0200)]
prosody: announce tmp.sourcephile.fr for HTTP uploads
Julien Moutinho [Mon, 3 Aug 2020 03:37:15 +0000 (05:37 +0200)]
coturn: install on mermet (for prosody)
Julien Moutinho [Sun, 2 Aug 2020 22:00:44 +0000 (00:00 +0200)]
prosody: test on losurdo
Julien Moutinho [Sun, 2 Aug 2020 10:52:20 +0000 (12:52 +0200)]
wireguard: improve initrd setup
Julien Moutinho [Sun, 2 Aug 2020 05:38:15 +0000 (07:38 +0200)]
wireguard: setup in initrd
Julien Moutinho [Sat, 1 Aug 2020 05:15:50 +0000 (07:15 +0200)]
wireguard: setup intranet
Julien Moutinho [Fri, 31 Jul 2020 03:58:53 +0000 (05:58 +0200)]
ssh: add reverse ssh giving access to losurdo from mermet
Julien Moutinho [Fri, 31 Jul 2020 00:55:13 +0000 (02:55 +0200)]
nix: commit changes during work on services.transmission
Julien Moutinho [Fri, 24 Jul 2020 07:51:00 +0000 (09:51 +0200)]
nix: update nixpkgs/patches
Julien Moutinho [Wed, 22 Jul 2020 13:26:32 +0000 (15:26 +0200)]
nix: simplify the sending root's OpenPGP key
Julien Moutinho [Wed, 22 Jul 2020 02:18:42 +0000 (04:18 +0200)]
nix: reorganize a few things
Julien Moutinho [Tue, 21 Jul 2020 08:47:55 +0000 (10:47 +0200)]
nix: use nixpkgs/patches/ instead of nixos/modules/
Julien Moutinho [Tue, 21 Jul 2020 04:41:22 +0000 (06:41 +0200)]
nix: fix installation comments
Julien Moutinho [Tue, 21 Jul 2020 03:48:02 +0000 (05:48 +0200)]
nix: use nixpkgs/patches/wip.diff instead of nixpkgs/overlays.nix and nixos/modules.nix
Julien Moutinho [Tue, 21 Jul 2020 03:43:59 +0000 (05:43 +0200)]
nix: servers.nix -> machines.nix
Julien Moutinho [Mon, 20 Jul 2020 06:32:47 +0000 (08:32 +0200)]
transmission: fix net.core.{r,w}mem_max
Julien Moutinho [Sun, 19 Jul 2020 04:16:36 +0000 (06:16 +0200)]
apparmor: publich and use PR#93457
Julien Moutinho [Fri, 17 Jul 2020 06:39:56 +0000 (08:39 +0200)]
apparmor: remove references to Subdomain
Julien Moutinho [Fri, 17 Jul 2020 05:35:10 +0000 (07:35 +0200)]
apparmor: fix path
Julien Moutinho [Fri, 17 Jul 2020 04:20:28 +0000 (06:20 +0200)]
nix: polish code
Julien Moutinho [Fri, 17 Jul 2020 04:19:58 +0000 (06:19 +0200)]
apparmor: improve the service
Julien Moutinho [Thu, 16 Jul 2020 15:15:42 +0000 (17:15 +0200)]
postgresql: openconcerto: suppression base labascule
Julien Moutinho [Thu, 16 Jul 2020 14:24:31 +0000 (16:24 +0200)]
postgresql: allow pgadmin3 on openconcerto databases
Julien Moutinho [Thu, 16 Jul 2020 04:24:09 +0000 (06:24 +0200)]
apparmor: fix/rewrite security.apparmor
Julien Moutinho [Wed, 15 Jul 2020 21:07:51 +0000 (23:07 +0200)]
nix: typo in comment
Julien Moutinho [Wed, 15 Jul 2020 12:35:38 +0000 (14:35 +0200)]
pass: use builtins.dirOf
Julien Moutinho [Wed, 15 Jul 2020 00:41:40 +0000 (02:41 +0200)]
nftables: open firewall from mermet to losurdo
Julien Moutinho [Wed, 15 Jul 2020 00:40:41 +0000 (02:40 +0200)]
nginx: fix auth_basic
Julien Moutinho [Wed, 15 Jul 2020 00:40:23 +0000 (02:40 +0200)]
transmission: set more higher limits
Julien Moutinho [Wed, 15 Jul 2020 00:13:48 +0000 (02:13 +0200)]
transmission: more config
Julien Moutinho [Wed, 15 Jul 2020 00:12:58 +0000 (02:12 +0200)]
systemd: fix reload of services
Julien Moutinho [Wed, 15 Jul 2020 00:11:16 +0000 (02:11 +0200)]
transmission: fix and improve the hardening
Julien Moutinho [Fri, 10 Jul 2020 07:26:44 +0000 (09:26 +0200)]
transmission: fix umask
Julien Moutinho [Fri, 10 Jul 2020 01:21:48 +0000 (03:21 +0200)]
nginx: install on losurdo
Julien Moutinho [Thu, 9 Jul 2020 22:31:11 +0000 (00:31 +0200)]
sanoid: add missing cleanup of remote backups
Julien Moutinho [Thu, 9 Jul 2020 02:34:44 +0000 (04:34 +0200)]
sanoid: cleanup
Julien Moutinho [Wed, 8 Jul 2020 23:59:09 +0000 (01:59 +0200)]
postgresql: add openconcerto database labascule
Julien Moutinho [Wed, 8 Jul 2020 17:23:36 +0000 (19:23 +0200)]
initrd: fix SSH host key location
Julien Moutinho [Tue, 7 Jul 2020 15:03:21 +0000 (17:03 +0200)]
fail2ban: update whitelist
Julien Moutinho [Tue, 7 Jul 2020 15:02:53 +0000 (17:02 +0200)]
kernel: set only vm.swappiness=10
Julien Moutinho [Tue, 7 Jul 2020 13:25:24 +0000 (15:25 +0200)]
nix: upgrade to latests nixos-unstable-small, fix boot.initrd.network.ssh.hostKeys
Julien Moutinho [Tue, 7 Jul 2020 01:50:09 +0000 (03:50 +0200)]
postgresql: allow pg_dump and tune for ZFS
Julien Moutinho [Wed, 1 Jul 2020 13:40:58 +0000 (15:40 +0200)]
transmission: improve the service
Julien Moutinho [Mon, 29 Jun 2020 02:06:50 +0000 (04:06 +0200)]
nix: add julm to some meta.maintainers
Julien Moutinho [Mon, 29 Jun 2020 01:56:48 +0000 (03:56 +0200)]
transmission: improve the service module
Julien Moutinho [Fri, 26 Jun 2020 18:22:52 +0000 (20:22 +0200)]
nix: update to latest nixos-unstable-small
Julien Moutinho [Thu, 25 Jun 2020 17:07:22 +0000 (19:07 +0200)]
dovecot: silence error revealed by scudo, by disabling scudo
Julien Moutinho [Wed, 24 Jun 2020 23:16:36 +0000 (01:16 +0200)]
fail2ban: reduce findtime to reduce RAM footprint and startup time
Julien Moutinho [Wed, 24 Jun 2020 22:46:50 +0000 (00:46 +0200)]
fail2ban: enable on mermet too
Julien Moutinho [Wed, 24 Jun 2020 22:36:12 +0000 (00:36 +0200)]
nix: use the hardened profile on mermet too
Julien Moutinho [Wed, 24 Jun 2020 22:18:43 +0000 (00:18 +0200)]
nftables: replace shorewall on mermet too
Julien Moutinho [Wed, 24 Jun 2020 20:45:26 +0000 (22:45 +0200)]
rspamd: use --no-block to avoid deadlocking services
Julien Moutinho [Wed, 24 Jun 2020 18:50:04 +0000 (20:50 +0200)]
nix: deploy security.pass to mermet too
Julien Moutinho [Wed, 24 Jun 2020 16:52:55 +0000 (18:52 +0200)]
nix: security.pass re-add convenient postStart
Julien Moutinho [Wed, 24 Jun 2020 16:09:51 +0000 (18:09 +0200)]
gnupg: create remaining servers' key
Julien Moutinho [Wed, 24 Jun 2020 15:52:30 +0000 (17:52 +0200)]
nix: rename install to install.ssh-nixos
Julien Moutinho [Wed, 24 Jun 2020 15:08:06 +0000 (17:08 +0200)]
nix: fix install and security.pass
Julien Moutinho [Wed, 24 Jun 2020 01:36:55 +0000 (03:36 +0200)]
nix: fix security.pass services
Julien Moutinho [Tue, 23 Jun 2020 17:16:49 +0000 (19:16 +0200)]
nix: add module security.pass
Julien Moutinho [Sat, 20 Jun 2020 17:12:04 +0000 (19:12 +0200)]
postgresql: log connections
Julien Moutinho [Sat, 20 Jun 2020 16:20:28 +0000 (18:20 +0200)]
postgresql: fix pg_adduser
Julien Moutinho [Sat, 20 Jun 2020 16:08:12 +0000 (18:08 +0200)]
postgresql: add openconcerto databases lbec and lbm
Julien Moutinho [Sat, 20 Jun 2020 09:19:06 +0000 (11:19 +0200)]
nix: revamp nixos/{base => profiles}/
Julien Moutinho [Fri, 19 Jun 2020 17:45:33 +0000 (19:45 +0200)]
fail2ban: increase findtime to 15d
Julien Moutinho [Fri, 19 Jun 2020 16:59:57 +0000 (18:59 +0200)]
shorewall: remove configs on losurdo
Julien Moutinho [Fri, 19 Jun 2020 16:56:42 +0000 (18:56 +0200)]
fail2ban: enable sshd and postgresql on losurdo
Julien Moutinho [Thu, 18 Jun 2020 03:28:22 +0000 (05:28 +0200)]
nftables: only use unbound for DNS resolving
Julien Moutinho [Thu, 18 Jun 2020 02:46:50 +0000 (04:46 +0200)]
nftables: replace shorewall on losurdo
Julien Moutinho [Wed, 17 Jun 2020 13:40:35 +0000 (15:40 +0200)]
losurdo: enable hardened profile
Julien Moutinho [Wed, 17 Jun 2020 13:39:29 +0000 (15:39 +0200)]
ssh: add mermet to losurdo
sourcephile / git / sourcephile-nix.git / log