368 commits

Author	SHA1	Message	Date
Rouven Seifert	1821fe37c8	dns: fix exclude for mail.rfive.de	2024-04-18 20:58:13 +02:00
Rouven Seifert	8f0a5e1a8a	dns: keep things DRY	2024-04-18 20:05:32 +02:00
Rouven Seifert	43a4843551	DNS: autogenerate CNAMES from nginx config	2024-04-18 19:49:40 +02:00
Rouven Seifert	ee02192290	wireguard: fix DNS search domains	2024-04-18 19:49:10 +02:00
Rouven Seifert	a1afdcbdd0	dns: autogenerate the serial with some funky nix magic	2024-04-17 23:45:28 +02:00
Rouven Seifert	d14f499783	dns: switch to dns.nix	2024-04-17 22:04:08 +02:00
Rouven Seifert	9bcfed2629	iso: misc fixes	2024-04-12 11:01:18 +02:00
Rouven Seifert	321b85242f	treewide: cleanups and updates	2024-04-11 11:58:50 +02:00
Rouven Seifert	2297f6506d	docker: enable rootless	2024-04-11 11:52:03 +02:00
Rouven Seifert	16a9362aba	thinkpad: minor networking fixes	2024-04-10 00:33:33 +02:00
Rouven Seifert	6a78a9039d	nuc: fix dns setup for adguard	2024-04-10 00:31:05 +02:00
Rouven Seifert	358220a12e	falkenstein: fix dkim record and wireguard dns	2024-04-10 00:30:35 +02:00
Rouven Seifert	d18366c69c	thinkpad: fix wireguard dns	2024-04-03 00:02:04 +02:00
Rouven Seifert	02f075b615	nginx: enable http3	2024-04-03 00:01:40 +02:00
Rouven Seifert	1b3c8721ec	falkenstein: cleanups	2024-04-01 14:25:19 +02:00
Rouven Seifert	0205b8b2ea	dns: move all local hosts under vpn.rfive.de	2024-04-01 14:23:43 +02:00
Rouven Seifert	fcae1118f4	dns: only use wireguard for the .lan domain	2024-04-01 13:07:10 +02:00
Rouven Seifert	d300cae8ea	dns: cleanup	2024-03-28 22:09:57 +01:00
Rouven Seifert	24df9d0008	nix: flake update	2024-03-28 22:09:19 +01:00
Rouven Seifert	638cfd3991	logging: don't use dates in rotate	2024-03-28 22:03:34 +01:00
Rouven Seifert	b429b2c811	update truck simulator	2024-03-25 20:35:26 +01:00
Rouven Seifert	00a670cbf5	nginx: remove useless enableACME options	2024-03-25 19:09:28 +01:00
Rouven Seifert	4fcf655dc4	purge: update	2024-03-25 19:06:38 +01:00
Rouven Seifert	dcb384b1cd	formatting	2024-03-25 19:06:25 +01:00
Rouven Seifert	c776c72286	falkenstein: configure log retention	2024-03-23 00:32:21 +01:00
Rouven Seifert	a8d2ace6ab	thinkpad: reenable all modules	2024-03-23 00:31:32 +01:00
Rouven Seifert	a16bc598a4	thinkpad: revert to btrfs ... zfs just randomly decided to fail	2024-03-22 17:24:57 +01:00
Rouven Seifert	f23177f96d	nuc: remove hydra file	2024-03-13 16:22:25 +01:00
Rouven Seifert	02eef8f563	river: build from master	2024-03-13 16:22:01 +01:00
Rouven Seifert	4bd3816f34	formatting	2024-03-12 17:09:02 +01:00
Rouven Seifert	9a13c1774f	bind: fix zonefile ownership	2024-03-12 17:08:09 +01:00
Rouven Seifert	a7b2d18db0	mail: split into modules	2024-03-12 17:07:33 +01:00
Rouven Seifert	ba3929c399	ns: redo dnssec policy	2024-03-11 12:40:23 +01:00
Rouven Seifert	cb49b95c53	nuc: re-enable adguard dns	2024-03-11 12:40:04 +01:00
Rouven Seifert	5dbab41a2e	ns: better soa format	2024-03-10 21:03:24 +01:00
Rouven Seifert	c877f4be7f	ns: switch to hidden primary model	2024-03-10 20:51:05 +01:00
Rouven Seifert	9e01a0bc04	ns: fix soa record	2024-03-10 20:42:51 +01:00
Rouven Seifert	f717779d32	trucksimulator-images: move to main domain	2024-03-10 19:53:30 +01:00
Rouven Seifert	25ac340213	small cleanup	2024-03-10 19:53:00 +01:00
Rouven Seifert	276a49ce31	nuc: disable dnssec	2024-03-10 19:52:52 +01:00
Rouven Seifert	9f0712d2ca	falkenstein: enable dnssec	2024-03-09 23:22:02 +01:00
Rouven Seifert	be70c4119a	dns: simplify zonefile	2024-03-09 21:39:15 +01:00
Rouven Seifert	7a3f987b0d	keycloak: disable	2024-03-09 15:23:50 +01:00
Rouven Seifert	103c238e3e	nuc: disable uptime-kuma	2024-03-09 13:39:07 +01:00
Rouven Seifert	7bad85eb1f	trucksimulator: shorten urls	2024-03-09 13:26:49 +01:00
Rouven Seifert	05dc9b4671	falkenstein.vpn -> falkenstein	2024-03-09 12:40:02 +01:00
Rouven Seifert	525b92a65d	nuc: add keycloak	2024-03-09 12:39:16 +01:00
Rouven Seifert	911fa95dd1	falkenstein: disable zram and add own dns config	2024-03-09 12:38:24 +01:00
Rouven Seifert	a85d214498	pfersel: remove secret owner	2024-03-04 20:05:39 +01:00
Rouven Seifert	cb11bc0764	mail: a lot of improvements	2024-03-04 20:04:18 +01:00
Rouven Seifert	6159a76a85	matrix: add telegram bridge	2024-02-29 15:37:22 +01:00
Rouven Seifert	0302463733	mail: enable archive	2024-02-26 19:14:36 +01:00
Rouven Seifert	11b11c2be7	nuc: remove grafana	2024-02-18 17:11:57 +01:00
Rouven Seifert	e05b987ff7	networking: more virt interfaces	2024-02-18 17:08:02 +01:00
Rouven Seifert	3dc025762f	updates and fixes	2024-02-17 19:14:03 +01:00
Rouven Seifert	7cda66afc2	colorscheme.colors -> colorscheme.palette	2024-02-11 20:12:25 +01:00
Rouven Seifert	839f56d098	thinkpad: add curl and fix fonts	2024-02-11 20:01:15 +01:00
Rouven Seifert	e315b81cda	thinkpad: use sudo-rs instead of sudo	2024-02-11 20:00:53 +01:00
Rouven Seifert	2e3f52a60e	thinkpad: enable docker	2024-02-11 19:58:56 +01:00
Rouven Seifert	64777dfabf	nuc: unforce dnssec	2024-02-11 19:58:09 +01:00
Rouven Seifert	82aa8774d9	mail: use nix native sieve options	2024-02-11 19:57:42 +01:00
Rouven Seifert	71939c6c39	systemd: allow soft-reboot	2024-01-29 23:50:34 +01:00
Rouven Seifert	b3329fd1a9	home: remove declarative account configuration	2024-01-27 23:03:53 +01:00
Rouven Seifert	e7a4594300	matrix: enable element-web	2024-01-27 23:03:29 +01:00
Rouven Seifert	0fb57287bd	falkenstein: add some spoofing restrictions	2024-01-25 18:20:24 +01:00
Rouven Seifert	7a8e304ca1	nuc: disable dnssec as it breaks matrix	2024-01-25 18:19:48 +01:00
Rouven Seifert	c8fa651010	updates	2024-01-22 01:08:20 +01:00
Rouven Seifert	6cb6667093	thinkpad: wayland and bluetooth fixes	2024-01-22 01:07:30 +01:00
Rouven Seifert	758c58f5c2	nix flake update	2024-01-14 13:17:29 +01:00
Rouven Seifert	7e8859d116	network: bind wg0to wireless	2024-01-11 14:14:19 +01:00
Rouven Seifert	3a052ca275	Revert "another try" ... This reverts commit eefcb05e3a.	2024-01-04 17:26:11 +01:00
Rouven Seifert	eefcb05e3a	another try	2024-01-04 14:56:38 +01:00
Rouven Seifert	94689ed2b2	disable gcc tuning	2024-01-04 14:54:49 +01:00
Rouven Seifert	20f2a3edb4	Revert "one last try" ... This reverts commit 41b724b744.	2024-01-04 14:54:25 +01:00
Rouven Seifert	41b724b744	one last try	2024-01-04 14:53:06 +01:00
Rouven Seifert	66a502d7e6	small hydra test	2024-01-04 11:30:19 +01:00
Rouven Seifert	ee31ef9c4c	gcc: tune arch	2024-01-04 00:17:40 +01:00
Rouven Seifert	60ed410a43	bring back hydra	2024-01-04 00:13:46 +01:00
Rouven Seifert	031a2004f3	cleanup and update changes	2024-01-04 00:13:32 +01:00
Rouven Seifert	fcdc32c2f0	networking: fix wireguard dns	2024-01-04 00:10:15 +01:00
Rouven Seifert	ec6fefe59c	refactor: cleanup	2023-12-29 19:47:57 +01:00
Rouven Seifert	3aa45471d8	thinkpad: power management improvements	2023-12-29 19:40:10 +01:00
Rouven Seifert	8a6f689e6a	virtualisation: fix firewall and secureboot ... gpu passthrough wann?	2023-12-27 22:55:40 +01:00
Rouven Seifert	c4e59829c4	network: disable lldpd	2023-12-27 22:22:42 +01:00
Rouven Seifert	51001f585b	networking: fix ifsr-apb password	2023-12-24 23:40:01 +01:00
Rouven Seifert	1bcad0949a	systemd-networkd improvements	2023-12-23 17:30:24 +01:00
Rouven Seifert	70123785d6	nginx: enable http3 for falkenstein	2023-12-23 17:30:04 +01:00
Rouven Seifert	dab85522ba	ssh3: init packages	2023-12-19 22:42:38 +01:00
Rouven Seifert	1c9806cd0c	misc updates	2023-12-17 17:27:20 +01:00
Rouven Seifert	6a57013187	security: enable u2f	2023-12-17 17:27:14 +01:00
Rouven Seifert	dd997624a9	network: add openfortivpn and wifi@db	2023-12-17 17:22:12 +01:00
Rouven Seifert	cf9dedf17a	networking updates	2023-12-12 17:44:28 +01:00
Rouven Seifert	9e8e5053fd	add shared systemd module	2023-12-12 17:43:16 +01:00
Rouven Seifert	0ac9348fd2	v4l2, printing and website	2023-12-01 15:07:47 +01:00
Rouven Seifert	2e8e3ada22	networking and security updates	2023-11-25 23:22:16 +01:00
Rouven Seifert	aa2c1e702c	host/thinkpad: split into modules	2023-11-24 09:57:15 +01:00
Rouven Seifert	70a6695ca1	updates and virtualization enhancements	2023-11-24 09:19:06 +01:00
Rouven Seifert	bad96e4197	falkenstein-1 -> falkenstein	2023-11-20 22:46:51 +01:00
Rouven Seifert	41d348b037	nixos-hardware: remove	2023-11-18 14:54:56 +01:00
Rouven Seifert	81d601608d	adguard + nextcloud: remove	2023-11-18 00:11:37 +01:00