Commit graph

725 commits

Author SHA1 Message Date
Christoph Heiss a09ec193b7
home-manager: zsh: remove now-included "ripgrep" plugin
All checks were successful
flake / build (push) Successful in 3m10s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-09-20 11:47:48 +02:00
Christoph Heiss 6106809c1f
secrets: fort: change some things
All checks were successful
flake / build (push) Successful in 3m24s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-09-19 17:22:02 +02:00
Christoph Heiss 8486f7815a
flake: bump inputs to 31-08-2024
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-09-19 17:18:17 +02:00
Christoph Heiss dcc68f513f
services: forgejo: disable rsa and dsa ssh keys
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-09-19 15:24:18 +02:00
Christoph Heiss 649c08429a
pkgs: build-support: remove unneeded prefix
All checks were successful
flake / build (push) Successful in 2m54s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:23:03 +02:00
Christoph Heiss 850c8a0cc1
lib: add trimNewlines
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:05:35 +02:00
Christoph Heiss 5280397071
flake: add overlays output
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:04:51 +02:00
Christoph Heiss 9d6a0bc327
flake: simplify packages setup
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:02:26 +02:00
Christoph Heiss 200355c7ec
lib: move buildPerlApplication to dedicated build-support module
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-25 23:01:56 +02:00
Christoph Heiss 6f656dff2f
secrets: fort: update something
All checks were successful
flake / build (push) Successful in 3m2s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 20:27:40 +02:00
Christoph Heiss d63c2335a8
services: web: c8h4-io: move acme definitions here
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 20:26:49 +02:00
Christoph Heiss be9bb3843c
services: forgejo: simplify sshd setup
All checks were successful
flake / build (push) Successful in 2m59s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 17:47:58 +02:00
Christoph Heiss dfeffdf041
services: openssh: disable sftp subsystem for real
All checks were successful
flake / build (push) Successful in 3m9s
Apparently, the default value is `true`, not `false` as I erroneously
assumed. :/

Fixes: 389f345 ("services: openssh: disable sftp subsystem")
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 17:39:21 +02:00
Christoph Heiss 4bd87669df
services: forgejo: enable twoqueue cache
All checks were successful
flake / build (push) Successful in 3m6s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 17:12:15 +02:00
Christoph Heiss 3f29ed7dfb
services: forgejo: enable old actions and repo archive cleanup tasks
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 17:09:56 +02:00
Christoph Heiss 54b41e8933
services: forgejo: disable user account deletion
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 17:07:13 +02:00
Christoph Heiss 35dcf3d3ba
services: forgejo: pin secret key
All checks were successful
flake / build (push) Successful in 3m18s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:12:16 +02:00
Christoph Heiss 30d55d5792
services: forgejo: move to other host with dedicated data directory
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:12:16 +02:00
Christoph Heiss 7abca790ca
services: forgejo: simplify nginx setup
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:02:26 +02:00
Christoph Heiss 981fe69bf5
services: forgejo: simplify ssh setup by renaming user
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 14:02:23 +02:00
Christoph Heiss 738a05aec0
services: forgejo: switch database to sqlite3
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-24 13:03:32 +02:00
Christoph Heiss 3c80b32440
machines: maui: add some useful git send-email aliases
All checks were successful
flake / build (push) Successful in 3m1s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 11:16:27 +02:00
Christoph Heiss c513cc2bce
home-manager: desktop: git: set sendemail identity explicitly
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 11:13:36 +02:00
Christoph Heiss 065a6e1eb0
machines: maui: set git suppress-cc to 'all'
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 11:07:05 +02:00
Christoph Heiss c4920d7616
home-manager: desktop: remove old git alias in favor of tig
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 10:52:17 +02:00
Christoph Heiss a182c40fab
home-manager: desktop: move stray comment to correct place
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-23 10:48:30 +02:00
Christoph Heiss ede4400e9e
services: nginx: add fail2ban filter for (more) crawlers
All checks were successful
flake / build (push) Successful in 2m57s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 23:11:20 +02:00
Christoph Heiss 17a05c88db
pkgs: neomutt-export-patches: convert to new buildPerlApplication helper
All checks were successful
flake / build (push) Successful in 3m1s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 21:02:35 +02:00
Christoph Heiss d51b5ab8f9
pkgs: deploy-sink: convert to new buildPerlApplication helper
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 21:00:06 +02:00
Christoph Heiss fa12895af3
pkgs: automation-shell: convert to new buildPerlApplication helper
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 20:55:42 +02:00
Christoph Heiss ae13670a64
flake: add custom lib with initial perl application builder
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 20:49:43 +02:00
Christoph Heiss 8b45301ab9
secrets: tank: update something
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 20:10:31 +02:00
Christoph Heiss efef37f22f
home-manager: desktop: move fontconfig file into common attrset
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 20:10:03 +02:00
Christoph Heiss befdf9fa84
home-manager: firefox: add initial declarative configuration
All checks were successful
flake / build (push) Successful in 3m22s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 17:33:22 +02:00
Christoph Heiss 92ff9a23cf
common: nix-options: directly set flake-registry
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-22 16:01:31 +02:00
Christoph Heiss 1f851ab8b9
secrets: desktop: update something
All checks were successful
flake / build (push) Successful in 3m12s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-21 14:35:38 +02:00
Christoph Heiss d980c44163
extra: zshrc: common: autoload zmv tool
All checks were successful
flake / build (push) Successful in 3m7s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 23:25:16 +02:00
Christoph Heiss 1fa17a074f
extra: nvim: add keymapping to load last directory session
All checks were successful
flake / build (push) Successful in 3m23s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 11:05:48 +02:00
Christoph Heiss b4c458e11a
services: vaultwarden: add fail2ban jail
All checks were successful
flake / build (push) Successful in 3m7s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 10:39:58 +02:00
Christoph Heiss e373b1aa98
services: nginx: enable fail2ban 'apache-badbots' filter
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 10:36:10 +02:00
Christoph Heiss 9250581753
services: fail2ban: increase default bantime to 1 week
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 10:31:37 +02:00
Christoph Heiss bc67437947
system: deploy-target: update public ssh key
All checks were successful
flake / build (push) Successful in 3m13s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-19 08:42:25 +02:00
Christoph Heiss 31076d3f8f
services: add new yarr service for RSS reading
All checks were successful
flake / build (push) Successful in 3m57s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-18 22:03:19 +02:00
Christoph Heiss 760261f58e
modules: services: add new service definition for yarr
https://github.com/nkanaev/yarr

Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-18 22:01:29 +02:00
Christoph Heiss 4f7694fec5
services: vaultwarden: move to fort
All checks were successful
flake / build (push) Successful in 3m30s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 18:22:02 +02:00
Christoph Heiss bd16916a99
services: vaultwarden: migrate from postgresql to sqlite
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 17:53:52 +02:00
Christoph Heiss ccbfff0b13
services: vaultwarden: factor out fqdn construction
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 17:50:56 +02:00
Christoph Heiss 2875ee182b
services: vikunja: move to fort
All checks were successful
flake / build (push) Successful in 3m31s
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 16:52:44 +02:00
Christoph Heiss 14632d40a7
services: vikunja: centralize fqdn construction
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 14:58:33 +02:00
Christoph Heiss ee24f14950
home-manager: desktop: nvim: sort treesitter plugin list
Signed-off-by: Christoph Heiss <christoph@c8h4.io>
2024-08-17 14:21:13 +02:00