341 commits

Author	SHA1	Message	Date
Rouven Seifert	f23177f96d	nuc: remove hydra file	2024-03-13 16:22:25 +01:00
Rouven Seifert	02eef8f563	river: build from master	2024-03-13 16:22:01 +01:00
Rouven Seifert	4bd3816f34	formatting	2024-03-12 17:09:02 +01:00
Rouven Seifert	9a13c1774f	bind: fix zonefile ownership	2024-03-12 17:08:09 +01:00
Rouven Seifert	a7b2d18db0	mail: split into modules	2024-03-12 17:07:33 +01:00
Rouven Seifert	ba3929c399	ns: redo dnssec policy	2024-03-11 12:40:23 +01:00
Rouven Seifert	cb49b95c53	nuc: re-enable adguard dns	2024-03-11 12:40:04 +01:00
Rouven Seifert	5dbab41a2e	ns: better soa format	2024-03-10 21:03:24 +01:00
Rouven Seifert	c877f4be7f	ns: switch to hidden primary model	2024-03-10 20:51:05 +01:00
Rouven Seifert	9e01a0bc04	ns: fix soa record	2024-03-10 20:42:51 +01:00
Rouven Seifert	f717779d32	trucksimulator-images: move to main domain	2024-03-10 19:53:30 +01:00
Rouven Seifert	25ac340213	small cleanup	2024-03-10 19:53:00 +01:00
Rouven Seifert	276a49ce31	nuc: disable dnssec	2024-03-10 19:52:52 +01:00
Rouven Seifert	9f0712d2ca	falkenstein: enable dnssec	2024-03-09 23:22:02 +01:00
Rouven Seifert	be70c4119a	dns: simplify zonefile	2024-03-09 21:39:15 +01:00
Rouven Seifert	7a3f987b0d	keycloak: disable	2024-03-09 15:23:50 +01:00
Rouven Seifert	103c238e3e	nuc: disable uptime-kuma	2024-03-09 13:39:07 +01:00
Rouven Seifert	7bad85eb1f	trucksimulator: shorten urls	2024-03-09 13:26:49 +01:00
Rouven Seifert	05dc9b4671	falkenstein.vpn -> falkenstein	2024-03-09 12:40:02 +01:00
Rouven Seifert	525b92a65d	nuc: add keycloak	2024-03-09 12:39:16 +01:00
Rouven Seifert	911fa95dd1	falkenstein: disable zram and add own dns config	2024-03-09 12:38:24 +01:00
Rouven Seifert	a85d214498	pfersel: remove secret owner	2024-03-04 20:05:39 +01:00
Rouven Seifert	cb11bc0764	mail: a lot of improvements	2024-03-04 20:04:18 +01:00
Rouven Seifert	6159a76a85	matrix: add telegram bridge	2024-02-29 15:37:22 +01:00
Rouven Seifert	0302463733	mail: enable archive	2024-02-26 19:14:36 +01:00
Rouven Seifert	11b11c2be7	nuc: remove grafana	2024-02-18 17:11:57 +01:00
Rouven Seifert	e05b987ff7	networking: more virt interfaces	2024-02-18 17:08:02 +01:00
Rouven Seifert	3dc025762f	updates and fixes	2024-02-17 19:14:03 +01:00
Rouven Seifert	7cda66afc2	colorscheme.colors -> colorscheme.palette	2024-02-11 20:12:25 +01:00
Rouven Seifert	839f56d098	thinkpad: add curl and fix fonts	2024-02-11 20:01:15 +01:00
Rouven Seifert	e315b81cda	thinkpad: use sudo-rs instead of sudo	2024-02-11 20:00:53 +01:00
Rouven Seifert	2e3f52a60e	thinkpad: enable docker	2024-02-11 19:58:56 +01:00
Rouven Seifert	64777dfabf	nuc: unforce dnssec	2024-02-11 19:58:09 +01:00
Rouven Seifert	82aa8774d9	mail: use nix native sieve options	2024-02-11 19:57:42 +01:00
Rouven Seifert	71939c6c39	systemd: allow soft-reboot	2024-01-29 23:50:34 +01:00
Rouven Seifert	b3329fd1a9	home: remove declarative account configuration	2024-01-27 23:03:53 +01:00
Rouven Seifert	e7a4594300	matrix: enable element-web	2024-01-27 23:03:29 +01:00
Rouven Seifert	0fb57287bd	falkenstein: add some spoofing restrictions	2024-01-25 18:20:24 +01:00
Rouven Seifert	7a8e304ca1	nuc: disable dnssec as it breaks matrix	2024-01-25 18:19:48 +01:00
Rouven Seifert	c8fa651010	updates	2024-01-22 01:08:20 +01:00
Rouven Seifert	6cb6667093	thinkpad: wayland and bluetooth fixes	2024-01-22 01:07:30 +01:00
Rouven Seifert	758c58f5c2	nix flake update	2024-01-14 13:17:29 +01:00
Rouven Seifert	7e8859d116	network: bind wg0to wireless	2024-01-11 14:14:19 +01:00
Rouven Seifert	3a052ca275	Revert "another try" ... This reverts commit eefcb05e3a.	2024-01-04 17:26:11 +01:00
Rouven Seifert	eefcb05e3a	another try	2024-01-04 14:56:38 +01:00
Rouven Seifert	94689ed2b2	disable gcc tuning	2024-01-04 14:54:49 +01:00
Rouven Seifert	20f2a3edb4	Revert "one last try" ... This reverts commit 41b724b744.	2024-01-04 14:54:25 +01:00
Rouven Seifert	41b724b744	one last try	2024-01-04 14:53:06 +01:00
Rouven Seifert	66a502d7e6	small hydra test	2024-01-04 11:30:19 +01:00
Rouven Seifert	ee31ef9c4c	gcc: tune arch	2024-01-04 00:17:40 +01:00
Rouven Seifert	60ed410a43	bring back hydra	2024-01-04 00:13:46 +01:00
Rouven Seifert	031a2004f3	cleanup and update changes	2024-01-04 00:13:32 +01:00
Rouven Seifert	fcdc32c2f0	networking: fix wireguard dns	2024-01-04 00:10:15 +01:00
Rouven Seifert	ec6fefe59c	refactor: cleanup	2023-12-29 19:47:57 +01:00
Rouven Seifert	3aa45471d8	thinkpad: power management improvements	2023-12-29 19:40:10 +01:00
Rouven Seifert	8a6f689e6a	virtualisation: fix firewall and secureboot ... gpu passthrough wann?	2023-12-27 22:55:40 +01:00
Rouven Seifert	c4e59829c4	network: disable lldpd	2023-12-27 22:22:42 +01:00
Rouven Seifert	51001f585b	networking: fix ifsr-apb password	2023-12-24 23:40:01 +01:00
Rouven Seifert	1bcad0949a	systemd-networkd improvements	2023-12-23 17:30:24 +01:00
Rouven Seifert	70123785d6	nginx: enable http3 for falkenstein	2023-12-23 17:30:04 +01:00
Rouven Seifert	dab85522ba	ssh3: init packages	2023-12-19 22:42:38 +01:00
Rouven Seifert	1c9806cd0c	misc updates	2023-12-17 17:27:20 +01:00
Rouven Seifert	6a57013187	security: enable u2f	2023-12-17 17:27:14 +01:00
Rouven Seifert	dd997624a9	network: add openfortivpn and wifi@db	2023-12-17 17:22:12 +01:00
Rouven Seifert	cf9dedf17a	networking updates	2023-12-12 17:44:28 +01:00
Rouven Seifert	9e8e5053fd	add shared systemd module	2023-12-12 17:43:16 +01:00
Rouven Seifert	0ac9348fd2	v4l2, printing and website	2023-12-01 15:07:47 +01:00
Rouven Seifert	2e8e3ada22	networking and security updates	2023-11-25 23:22:16 +01:00
Rouven Seifert	aa2c1e702c	host/thinkpad: split into modules	2023-11-24 09:57:15 +01:00
Rouven Seifert	70a6695ca1	updates and virtualization enhancements	2023-11-24 09:19:06 +01:00
Rouven Seifert	bad96e4197	falkenstein-1 -> falkenstein	2023-11-20 22:46:51 +01:00
Rouven Seifert	41d348b037	nixos-hardware: remove	2023-11-18 14:54:56 +01:00
Rouven Seifert	81d601608d	adguard + nextcloud: remove	2023-11-18 00:11:37 +01:00
Rouven Seifert	2fae2a695b	refactor: ran deadnix	2023-11-16 15:53:15 +01:00
Rouven Seifert	dcaa017e5d	agenix: migrate falkenstein	2023-11-16 15:08:13 +01:00
Rouven Seifert	3c5095f144	agenix: migrate nuc	2023-11-16 14:40:40 +01:00
Rouven Seifert	591c0cd6b5	start replacing sops with agenix	2023-11-16 13:29:18 +01:00
Rouven Seifert	719ef1ba91	mail: use rspamd for dkim	2023-11-16 01:27:01 +01:00
Rouven Seifert	33f39b3a15	overlays: remove wdisplays	2023-11-10 11:58:46 +01:00
Rouven Seifert	2bb6fa41e0	networking updates, too many to write down	2023-11-07 19:56:10 +01:00
Rouven Seifert	862e8ecfb2	add grafana and prometheus	2023-10-29 11:58:56 +01:00
Rouven Seifert	78b1a5761c	cleanup	2023-10-28 15:51:25 +02:00
Rouven Seifert	45628bdbc3	agdsn and networking updates	2023-10-26 12:12:45 +02:00
Rouven Seifert	5148ff5953	wireguard and fail2ban	2023-10-22 15:45:30 +02:00
Rouven Seifert	78a47101ac	matrix: init	2023-10-17 10:39:14 +02:00
Rouven Seifert	fdcfeb524c	seafile: init	2023-10-15 16:30:40 +02:00
Rouven Seifert	2bacb74cc1	remove helix flake, add openwrt to router	2023-10-13 00:28:39 +02:00
Rouven Seifert	af80cf73db	helix got fixed upstream	2023-10-09 23:37:08 +02:00
Rouven Seifert	0a2b482244	some agdsn related changes	2023-10-08 14:22:52 +02:00
Rouven Seifert	b81a7a669a	systemd 254 arrived, switched back to sway	2023-09-29 10:32:24 +02:00
Rouven Seifert	e7cb531d8b	dnssec: enable	2023-09-24 22:46:12 +02:00
Rouven Seifert	6dece01018	fixed ssh errors, add hashcash, update mail config, update zsh config	2023-09-24 21:32:28 +02:00
Rouven Seifert	671f4eb06c	refactor networking domain	2023-09-19 13:47:08 +02:00
Rouven Seifert	5cbf915808	nixify some more bots	2023-09-12 11:09:32 +02:00
Rouven Seifert	970ddcdacb	remove crowdsec and add tpm key	2023-09-06 13:35:16 +02:00
Rouven Seifert	74a4348d1d	mail: put sieve scripts in /etc	2023-09-04 13:07:22 +02:00
Rouven Seifert	9f90c1643a	enable spam training	2023-09-03 22:30:56 +02:00
Rouven Seifert	0fb1da3199	mail improvements	2023-09-01 14:15:17 +02:00
Rouven Seifert	0a8ef57823	don't use latest kernels	2023-08-29 20:34:20 +02:00
Rouven Seifert	505d713001	new monitor arrived	2023-08-27 15:48:42 +02:00