Commit graph

139 commits

Author SHA1 Message Date
Inex Code f11d8cc902 feat(ssh): Allow ecdsa-sha2-nistp256 keys 2023-10-18 13:59:42 +03:00
Inex Code e417c57a60 fix: permissions for vaultwarden backups were too broad 2023-10-18 13:59:42 +03:00
Inex Code 5cbb31bac6 fix(email): make sure /var/sieve owned my mail user 2023-10-18 13:59:42 +03:00
Inex Code 17cadf4ffc fix(acme): add dns propagation check exceptions 2023-10-18 13:59:42 +03:00
Inex Code 8b68457c71 fix(acme): enable DNS propagation check 2023-10-18 13:59:42 +03:00
Inex Code c26abadbec fix: acme retrieval 2023-10-18 13:59:42 +03:00
Inex Code 3872646e97 Revert "fix: rename the cert name"
This reverts commit e8a25ec565.
2023-10-18 13:59:42 +03:00
Inex Code 3487513e34 fix: rename the cert name 2023-10-18 13:59:42 +03:00
Inex Code ab27cbd27a fix: do not use DNS challenge for root domain TLS
Previous solution made ACME create two TXT records
on the same subdomain, creating the conflict
2023-10-18 13:59:42 +03:00
Inex Code 306a572e12 refactor: remove unused restic-related code 2023-10-18 13:59:42 +03:00
Inex Code 5d49b8b416 refactor: remove restic credentials from post-installation scripts
These are handled by API now.
2023-10-18 13:59:42 +03:00
Inex Code 2f07bb37ce feat: update API deps 2023-10-18 13:59:42 +03:00
Alexander Tomokhov 11567d4db9 flake: revert from self.dirtyRev to self.rev 2023-10-09 02:23:45 +04:00
Alexander Tomokhov 9370d17b82 flake: embed dirty revision of NixOS configuration instead
The inevitable `--override-input` nix build (and nixos-rebuild) option
induces dirty state of the NixOS flake, thus `self.rev` couldn't be used
together.
2023-10-09 02:07:49 +04:00
Alexander Tomokhov 5643877cc1 flake: embed NixOS configuration git commit sha1 into nixos.label 2023-09-28 00:56:47 +04:00
Alexander Tomokhov 3bf91c25c3 readme: add build command for flakes 2023-09-18 17:23:22 +04:00
Alexander Tomokhov e4473ec733 do not import selfprivacy overlay path, but use flake overlay output 2023-09-18 17:22:13 +04:00
Alexander Tomokhov 50c554e6e7 don't pass selfprivacy-overlay to configuration.nix; nix flake lock 2023-08-23 02:06:33 +04:00
Alexander Tomokhov d1d025dda6 use hardware-configuration.nix as a flake input 2023-08-23 00:37:16 +04:00
Alexander Tomokhov afcec981bc experiment with userdata flake input to override by caller 2023-08-22 22:22:13 +04:00
Alexander Tomokhov a822f97699 pin dependencies in flake 2023-07-17 05:05:29 +04:00
Alexander Tomokhov 82dd9ad2d4 now it's a function, requiring userdata argument 2023-07-17 04:37:04 +04:00
Alexander Tomokhov d4af9f4459 attempt to readFile userdsata.json 2023-07-17 04:19:57 +04:00
Alexander Tomokhov ee2a895c61 test 2023-07-17 04:15:03 +04:00
Alexander Tomokhov 659ca147fd add hardware-configuration.nix for testing purposes 2023-07-15 16:52:30 +04:00
Inex Code 65b5a19777 Merge pull request 'fix: Reloading nginx after ACME' (#34) from nginx-reload-fix into master
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/34
2023-06-14 19:19:56 +03:00
Inex Code 60dd766846 fix: Reloading nginx after ACME 2023-06-14 19:19:49 +03:00
Inex Code 8006f83257 Merge pull request 'refactor(jitsi): Use the common TLS cert for Jitsi' (#33) from jitsi-tls-fix into master
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/33
2023-06-09 16:01:09 +03:00
Inex Code 74d35b16f2 fix(jitsi): disable gettings tls certs 2023-06-09 15:59:15 +03:00
Inex Code dd020c3a7d fix(acme): Disable DNS propagation check 2023-06-09 15:57:19 +03:00
Inex Code ba1695c642 fix(jitsi): Use the common TLS cert 2023-06-09 14:06:22 +03:00
Inex Code bc5778fdea feat(dns): Add support for DigitalOcean DNS and DeSEC DNS (#31)
Co-authored-by: inexcode <inex.code@selfprivacy.org>
Co-authored-by: NaiJi  <naiji@udongein.xyz>
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/31
2023-06-05 15:45:07 +03:00
Inex Code 8d99d1c78a fix: Make bitwarden read the env file 2023-05-14 17:22:09 +03:00
Inex Code 5e64b08381 feat(bitwarden): Add admin token support 2023-05-03 10:48:57 +03:00
Inex Code 7e590ae60c revert(gitea): Nix deprecations x2 2023-03-20 18:39:41 +03:00
Inex Code eb36e9b265 revert(gitea): Nix deprecations 2023-03-20 18:36:32 +03:00
Inex Code 3626506e3a fix: Conflicting Gitea log level 2023-03-20 18:31:39 +03:00
Inex Code c8c69957b5 Merge pull request 'nixos-22.11' (#25) from nixos-22.11 into master
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/25
2023-03-20 17:23:02 +02:00
Inex Code 9a8af62e0b fix: State Version type 2023-03-17 15:10:47 +03:00
Inex Code a5b965f08f fix(api): Python version 2023-03-17 15:09:13 +03:00
Inex Code d7edf5a95d chore(mailserver): Bump Mailserver to 22.11 release 2023-03-17 15:05:21 +03:00
Inex Code bdaf88208f fix: Huey version 2023-03-17 14:54:14 +03:00
Inex Code 2e175f8c10 feat: Add state version 2023-03-17 14:50:54 +03:00
Inex Code 497cf28ecc fix: Change Gitea settings due to Nix deprecations 2023-03-17 14:50:40 +03:00
Inex Code 9c662d9629 chore: Change channel of overlay for testing 2023-03-17 14:38:48 +03:00
Inex Code 0500315ae0 chore(nextcloud): Upgrade Nextcloud to v25 2023-03-17 14:38:11 +03:00
Inex Code d8f0922b8a fix(gitea): incorrect root URL 2023-01-08 10:29:08 +02:00
Inex Code ab0c3e113c Merge pull request 'API 2.1.0 support' (#24) from api-redis into master
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/24
2022-12-30 20:35:45 +02:00
Inex Code b4827e6e26 Merge branch 'master' into api-redis 2022-12-30 20:35:16 +02:00
Inex Code bfe0d18090 chore: Switch to API 2.1.0 2022-12-30 21:34:23 +03:00