414 commits

Author	SHA1	Message	Date
quitte	1f450f35f8	wiki: fix images	2023-08-23 16:34:42 +02:00
quitte	af6119a0ec	wiki: set default theme	2023-08-23 15:26:58 +02:00
Rouven Seifert	edac0c3eba	pads: move to ifsr.de	2023-08-23 15:17:12 +02:00
Rouven Seifert	b4d8a71c65	wiki: move to ifsr.de	2023-08-22 16:55:03 +02:00
Rouven Seifert	6500dd04b6	wiki: add redirects	2023-08-22 16:29:09 +02:00
Rouven Seifert	d188722565	Merge pull request #55 from fsr/padlist ... Add pad lister tool	2023-08-22 15:43:29 +02:00
Rouven Seifert	5c1af65721	padlist: configure ldap authentication	2023-08-22 15:37:42 +02:00
Rouven Seifert	a555a005e1	ldap: simplify homedir creation	2023-08-22 15:25:33 +02:00
Rouven Seifert	6887bae0a3	padlister: init	2023-08-22 14:55:56 +02:00
Rouven Seifert	72bac64809	ftp: formatting -_-	2023-08-22 14:35:26 +02:00
Rouven Seifert	897410f8df	ftp: enable fancy index	2023-08-22 14:32:23 +02:00
Rouven Seifert	7a902d6b8d	ftp: move to ifsr.de	2023-08-22 14:21:24 +02:00
Rouven Seifert	ee9d1abb68	courses: start after postgres	2023-08-21 12:10:44 +02:00
Rouven Seifert	8e2f284201	postgres: backup: specify databases	2023-08-21 11:48:03 +02:00
Rouven Seifert	cdd10f5372	postgres: enable backups	2023-08-21 11:40:56 +02:00
Rouven Seifert	ca5d374f51	stream: move to ifsr.de	2023-08-17 13:50:57 +02:00
Lyn Fugmann	fff575342d	wiki: add comments	2023-08-16 15:41:01 +02:00
Rouven Seifert	84a690bd52	wiki: start after postgres	2023-08-16 15:41:00 +02:00
Lyn Fugmann	e6948b1fa1	wiki: add VisualEditor plugin	2023-08-16 15:40:59 +02:00
Lyn Fugmann	aaab6ef91c	wiki: configure oidc auth	2023-08-16 15:40:43 +02:00
Lyn Fugmann	11be7f44c1	Patch Portunus to allow using both insecure ldap and ldaps at once	2023-08-16 15:39:52 +02:00
Lyn Fugmann	c992331bbd	Fix wiki setup and database connection	2023-08-16 15:39:39 +02:00
quitte	5bc34bdbdb	fixed ifsrde index	2023-08-16 15:11:27 +02:00
Rouven Seifert	38c947fe01	remove the vm	2023-08-16 14:51:01 +02:00
quitte	606c7185e0	on-metal updates ... - grav fixes - course management migration	2023-08-16 14:21:56 +02:00
Rouven Seifert	89404e80d3	include uptsream nginx config for grav	2023-08-16 13:57:10 +02:00
Rouven Seifert	aaf49311fc	ssl for the website	2023-08-16 13:28:43 +02:00
Rouven Seifert	f8684b8be9	initial website configuration	2023-08-16 13:24:56 +02:00
Rouven Seifert	8e85ef6281	secret rotation ... - removed all non-admin keys from ssh and sops - rotated sops keys - regenerated secrets	2023-08-14 11:31:18 +02:00
Rouven Seifert	f1924af906	vaultwarden: don't use staging domain	2023-08-09 15:36:53 +02:00
Rouven Seifert	88ae35d945	add activation script showing updated packages	2023-07-29 17:09:01 +02:00
Rouven Seifert	f3aa48f7b4	update bacula mail subject	2023-07-25 11:27:25 +02:00
Rouven Seifert	aa65070aa0	fix escaping in bacula mailcommand	2023-07-22 13:24:48 +02:00
Rouven Seifert	0e29e3c27a	configure mails for bacula	2023-07-21 12:30:55 +02:00
Rouven Seifert	03497aebc9	pin bacula to 9.6.7	2023-07-20 23:38:03 +02:00
Rouven Seifert	95fb2ae683	fix hedgedoc database config	2023-07-20 13:00:30 +02:00
Rouven Seifert	7839693bad	Merge pull request #52 from fsr/db-passwords ... remove postgresql passwords where they are not needed	2023-07-20 12:48:05 +02:00
Rouven Seifert	10101a9e18	write own bacula config file since the upstream one is broken	2023-07-20 10:14:12 +02:00
Rouven Seifert	8ef5af5305	fix sogo replacements	2023-07-19 17:49:32 +02:00
Rouven Seifert	defc2f2324	remove postgresql passwords where they are unneeded	2023-07-19 17:44:49 +02:00
Rouven Seifert	6d28293c86	Merge pull request #42 from fsr/gitea ... Add gitea module	2023-07-19 16:19:47 +02:00
Rouven Seifert	9b19e080b0	open firewall for bacula	2023-07-19 16:02:41 +02:00
root	8b30a10c0f	bacula fixes	2023-07-19 15:56:07 +02:00
Rouven Seifert	3fef58e888	configure bacula	2023-07-19 15:46:49 +02:00
Lyn Fugmann	a2360c9f56	Add gitea module	2023-07-19 15:46:37 +02:00
Rouven Seifert	32b74fefd1	add sane zsh config	2023-07-19 15:01:47 +02:00
Lyn Fugmann	da7cbfb98c	nixify portunus seeds	2023-07-19 14:32:06 +02:00
Lyn Fugmann	e8263b93dc	Refactor ldap and enable dex ... Co-authored-by: revol-xut <revol-xut@protonmail.com>	2023-07-19 14:31:47 +02:00
Rouven Seifert	80d016ae8f	enable mail quotas ... Currently set to 10 gigabytes. Nobody I know ever reached that limit, so it should be fine	2023-07-14 15:47:11 +02:00
Rouven Seifert	d7e85c3d43	Merge branch 'main' into vaultwarden	2023-07-12 15:54:36 +02:00
Rouven Seifert	c0266785cd	Merge branch 'main' into vaultwarden	2023-07-12 15:51:25 +02:00
Rouven Seifert	e7adae7b45	add mail settings	2023-07-12 15:46:25 +02:00
Lyn Fugmann	8d84f387f5	Add course-management module	2023-07-12 00:33:53 +02:00
Tassilo Tanneberger	69cf4211a4	Merge pull request #43 from fsr/userdir ... Serve public_html directory	2023-07-08 18:47:37 +02:00
Rouven Seifert	2afef761ed	Merge branch 'main' into garbage	2023-07-07 12:16:30 +02:00
Rouven Seifert	1b3ea40f9e	Merge branch 'main' into kpp	2023-07-07 12:10:53 +02:00
Rouven Seifert	105b2a0476	mail: include aliases in local recipient maps	2023-07-07 11:03:57 +02:00
Rouven Seifert	6c542cadb9	fix sending to aliases	2023-07-07 10:14:02 +02:00
Lyn Fugmann	9be95bc7d7	Fix IPv6 mail sending, add noreply alias	2023-07-06 01:10:47 +02:00
Rouven Seifert	0165a0ad2d	removed some unneeded files	2023-07-05 17:15:24 +02:00
Rouven Seifert	1d9359416d	add postmaster alias	2023-07-05 16:21:20 +02:00
Rouven Seifert	d5e881c639	use portunus.package to override	2023-07-04 17:06:18 +02:00
Rouven Seifert	d94a77d35c	configure kpp	2023-07-04 16:03:10 +02:00
Rouven Seifert	5136effd16	fix the portunus pach	2023-07-04 15:15:58 +02:00
Rouven Seifert	0d7a9738b0	manually patch the portunus regex	2023-07-04 15:10:00 +02:00
Rouven Seifert	8b3e42dbb6	disable mail forwarding	2023-07-04 14:54:59 +02:00
Rouven Seifert	18922904df	vaultwarden: init module	2023-07-04 14:20:55 +02:00
Rouven Seifert	2d431ff526	added sieve	2023-07-04 14:00:06 +02:00
Rouven Seifert	7354c31da8	fixed sogo	2023-07-04 12:45:51 +02:00
Rouven Seifert	566ba5082c	Merge remote-tracking branch 'origin/main' into mailman	2023-07-04 09:41:51 +02:00
Rouven Seifert	13020f8ce3	fix ldap group search	2023-07-04 09:36:08 +02:00
Rouven Seifert	15319c9b2b	various fixes ... - fix mailman's confirmation emails not sending - introduce a stateful /etc/aliases - configure ldap for postfix	2023-07-03 18:23:36 +02:00
Lyn Fugmann	34de78bee0	Serve public_html directory	2023-06-30 15:42:46 +02:00
Lyn Fugmann	eba88a8833	add mautrix-telegram	2023-06-22 20:18:28 +02:00
Rouven Seifert	3ddab16dae	use uid as lpad in	2023-06-13 20:17:20 +02:00
Rouven Seifert	0dd03b0965	enable acme for the ifsr base domain	2023-06-13 19:55:07 +02:00
Rouven Seifert	666e6b4425	enable submission on port 587	2023-06-13 19:55:06 +02:00
Rouven Seifert	a9b8875563	reload mail services upon acme renew	2023-06-13 19:55:05 +02:00
Rouven Seifert	a44c2e04e2	update mailman ssh settings and add root alias	2023-06-13 19:55:01 +02:00
Rouven Seifert	7331eef574	switch to the 23.05 release	2023-05-25 22:58:14 +02:00
Rouven Seifert	504c89d4e9	revert portunus patch to test other stuff	2023-05-12 15:08:11 +02:00
revol-xut	09330c5204	adding overlay for portunus	2023-04-26 15:42:26 +02:00
Rouven Seifert	1f1229e182	enable https for mailman	2023-04-24 22:30:04 +02:00
Rouven Seifert	5f761825f0	Merge pull request #30 from fsr/mailman ... Mailman config	2023-04-24 21:12:15 +02:00
revol-xut	8e1543bb14	nixpkgs fmt	2023-04-23 19:43:53 +02:00
revol-xut	25b6d71896	fixing the secrets	2023-04-13 19:35:10 +02:00
revol-xut	de62b47e52	merging with main	2023-04-13 18:56:15 +02:00
revol-xut	9cda0097fc	fixing database string	2023-04-13 18:52:15 +02:00
revol-xut	a8824ce574	trying to make sogo a little bit more secure	2023-04-13 18:38:37 +02:00
Rouven Seifert	12f1d690ba	added ldap config to mailman	2023-04-04 14:25:21 +02:00
Rouven Seifert	d1fb1b3de1	initial mailman config	2023-04-04 00:04:04 +02:00
Tassilo Tanneberger	b9c58f5363	Merge pull request #22 from fsr/mail ... [Draft] Fixes for the mail configuration	2023-04-03 23:19:32 +02:00
revol-xut	78dbad50f8	Merge branch 'sogo-test'	2023-04-03 23:14:28 +02:00
revol-xut	c813f3ac83	fixing secrets for sogo	2023-04-03 23:14:12 +02:00
Tassilo Tanneberger	7dffd30187	Merge pull request #29 from fsr/sogo-test ... Sogo Module implementation	2023-04-03 23:05:28 +02:00
revol-xut	e37482ef0a	nixpkgs fmt	2023-04-03 23:05:00 +02:00
Rouven Seifert	7c947ab23a	fix the domain name	2023-03-26 15:12:54 +02:00
Rouven Seifert	250ee8b01b	formatting	2023-03-24 17:06:40 +01:00
Rouven Seifert	214c0d525d	basic ftp config	2023-03-24 17:05:30 +01:00
Rouven Seifert	1a16265222	added important aliases	2023-03-24 16:24:18 +01:00
Rouven Seifert	36dbc82c75	fix homedir mailboxes	2023-03-24 15:51:57 +01:00
Rouven Seifert	e63e4d760c	use homedir mailboxes	2023-03-24 15:21:04 +01:00
Rouven Seifert	8f0f55a5ee	missing lib fix	2023-03-24 15:21:03 +01:00
Rouven Seifert	dd6374d371	postfix security enhancements	2023-03-24 15:21:02 +01:00
Rouven Seifert	041628def7	fixed dkim	2023-03-24 15:21:01 +01:00
Rouven Seifert	eee6282d69	mail: better ldap query and port fixes	2023-03-24 15:20:56 +01:00
tenksom	6ab7985a6a	Fixed wrong port	2023-03-22 12:09:21 +01:00
tenksom	c83ea08ee8	added timezone and vhostname	2023-03-22 11:24:14 +01:00
Rouven Seifert	0ed90c8122	fixed homedir creation for sshd	2023-03-10 16:38:57 +01:00
Rouven Seifert	adf2320e4a	create a home dir upon login	2023-03-10 16:15:53 +01:00
Rouven Seifert	8a2f5c7061	removed garbage	2023-03-10 15:47:56 +01:00
tenksom	6e36183995	Adding new lines for postgresql	2023-03-07 17:59:22 +01:00
tenksom	4f5137c6b9	Adding ldap, nginx, postgresql config in SOGo	2023-03-07 13:06:24 +01:00
tenksom	a3f4e289e1	The born of sogo	2023-03-01 18:44:56 +01:00
Rouven Seifert	c06161a62a	anonymize ip adresses in nginx logs	2023-03-01 16:40:45 +01:00
Lyn Fugmann	e9674b5b0e	configure ldap for hedgedoc (config adapted from kaki)	2023-02-27 11:08:21 +01:00
Rouven Seifert	0d08565be8	revert maildir to /var/mail	2023-02-17 13:54:14 +01:00
Rouven Seifert	9dc63921b8	fix hedgedoc	2023-02-15 15:53:15 +01:00
Rouven Seifert	97dc538040	fixed matrix ldap integration	2023-02-15 15:33:27 +01:00
Rouven Seifert	4945efdea7	fixed dovecot ldap queries	2023-02-15 15:14:57 +01:00
Rouven Seifert	593c324210	catting out the password doesn't work	2023-02-15 14:47:14 +01:00
Rouven Seifert	f04eb43459	fixed dovecot ldap	2023-02-15 14:40:37 +01:00
revol-xut	82f47b66cb	formatting	2023-02-15 13:20:23 +01:00
Rouven Seifert	bb23a7f67a	fixing the ldap user and temp disabling tls	2023-02-15 11:29:47 +01:00
Rouven Seifert	f1b22088c2	format fix	2023-02-03 16:09:41 +01:00
Rouven Seifert	58449429b9	changed maildir to /var/lib/mail, rspamd fixes	2023-02-03 16:04:45 +01:00
Rouven Seifert	b600c70202	formatting	2023-02-03 15:50:36 +01:00
Rouven Seifert	e893690e1d	use search user for ldap	2023-02-03 15:47:17 +01:00
Rouven Seifert	4e687b1484	some ldap config	2023-02-03 15:47:16 +01:00
Rouven Seifert	b74d72f722	configured dkim signing	2023-02-03 15:47:15 +01:00
Rouven Seifert	2411a9c185	finished rspamd setup	2023-02-03 15:47:14 +01:00
Rouven Seifert	a11a3614a9	configured tls and rspamd	2023-02-03 15:47:10 +01:00
Rouven Seifert	e569bdec50	formatting	2023-02-03 15:44:31 +01:00
Rouven Seifert	2a0e2c6623	add mail filters	2023-02-03 15:44:29 +01:00
Rouven Seifert	14ad30e65d	beautified the file and added opendkim	2023-02-03 15:44:28 +01:00
Rouven Seifert	ffae1bc8c5	receiving emails works now	2023-02-03 15:44:27 +01:00
Rouven Seifert	1f70d58853	Initial Email config ... Bare-minimum config consisting of postfix and dovecot2. For testing, passwd is used as userdb. Definitely NOT Production ready!	2023-02-03 15:44:26 +01:00
revol-xut	c41369e2ac	enabeling ldap auth	2023-02-03 15:40:42 +01:00
Lyn Fugmann	eeac519650	move matrix-synapse-ldap3.nix to /pkgs	2023-02-02 21:16:55 +01:00
Lyn Fugmann	fab0899e7e	package ldap3 plugin	2023-01-21 21:26:24 +01:00
Lyn Fugmann	c3134e1e58	Synapse LDAP config, add Portunus search user, update flake	2023-01-18 14:12:03 +01:00
Lyn Fugmann	4813ec4811	Merge branch 'main' into matrix	2022-12-17 21:39:37 +01:00
Lyn Fugmann	ce7db4dac5	format, use domain option	2022-12-17 21:23:46 +01:00
halcyon	924ac7ee31	fix: set portunus port to 8081	2022-12-17 21:03:54 +01:00
Lyn Fugmann	509cfd4121	Merge branch 'main' into matrix	2022-12-17 21:02:56 +01:00
halcyon	fc873af4b3	fix: remove open port 636, potential security risk	2022-12-17 19:45:53 +01:00
halcyon	cd1647e5d6	fix: remove unneeded /dex reverse proxy	2022-12-17 19:45:06 +01:00
halcyon	c91bcb11f8	fix: seedPath string -> path	2022-12-17 19:44:16 +01:00
halcyon	86295b5501	use config.fsr.domain	2022-12-17 19:21:16 +01:00
halcyon	3d8b8089d6	merge main into ldap	2022-12-17 19:17:52 +01:00
revol-xut	141bdb9737	adding option for domain	2022-12-17 19:12:41 +01:00
Lyn Fugmann	565bcae081	add matrix configuration	2022-12-17 19:11:37 +01:00
halcyon	e1c992f50a	clean up ldap.nix	2022-12-17 19:04:45 +01:00
halcyon	2f8d5b8949	remove users.ldap config	2022-12-17 19:03:02 +01:00
halcyon	eece008de6	add admin user with sops secured password	2022-12-17 18:48:30 +01:00
halcyon	f3ac390cf9	add portunus seeds file with basic groups, no users	2022-12-17 18:27:16 +01:00
halcyon	db63f4eb8d	format ldap.nix	2022-12-17 17:42:10 +01:00
halcyon	29e69b67ed	expanded portunus config ... - daclaritve portunus and openldap users/groups - basic sops stuff still needs discussion	2022-12-17 13:58:06 +01:00
halcyon	00291f7e9f	basic ldap/portunus config ... - config im moment nur auf meiner infra funktionstauglich, login auf website funktioniert - keine integrations getestet	2022-12-02 14:25:55 +01:00
Lyn Fugmann	61059500cd	fix hedgedoc	2022-11-18 19:08:43 +01:00
revol-xut	231d82029d	updating flake and pinning to 22.05	2022-11-18 17:51:09 +01:00
revol-xut	ba27089255	formatting and clean up	2022-11-18 17:45:03 +01:00
Tassilo Tanneberger	5f5f06dbdb	Merge pull request #7 from fsr/nextcloud	2022-11-18 17:41:42 +01:00
Lyn Fugmann	970f1180cc	add comments	2022-11-18 17:40:12 +01:00
revol-xut	575c1959f9	adding ssh into base.nix	2022-11-18 17:15:22 +01:00
Lyn Fugmann	67a76a0b2e	fix tabs	2022-11-18 17:13:58 +01:00
Lyn Fugmann	6f3bdbc456	add nextcloud config	2022-11-18 17:00:50 +01:00
revol-xut	0a2f59ddc5	resolving merge conflicts	2022-11-18 16:33:54 +01:00
Simon Bruder	474acca4e4	add ssh and pgp key	2022-11-18 15:12:13 +01:00
halcyon	c6534b0fbb	add gpg and ssh keys for jonas	2022-11-11 21:19:50 +01:00
revol-xut	3ac8ef4490	resolved merge conflicts	2022-11-11 16:41:15 +01:00
revol-xut	7279ea13e9	more test vm config	2022-11-11 16:39:48 +01:00
revol-xut	ab8e827aca	fixed typo and added test vm	2022-11-11 16:38:54 +01:00
blackblack-berry	a777d9c708	added ssh and pgp keys	2022-11-11 16:33:01 +01:00
Rouven Seifert	31b584f054	added gpg and ssh keys for rouven	2022-11-11 16:24:48 +01:00
Lyn Fugmann	09b40f4a15	add pgp and ssh keys	2022-11-11 15:37:17 +01:00
revol-xut	5b6ff8f662	moved ssh and gpg keys around	2022-11-05 11:44:53 +01:00
revol-xut	877da5918f	removed some config from streaming setup	2022-10-18 10:52:48 +02:00
revol-xut	909f827b10	adding sebastians ssh key	2022-10-18 10:48:51 +02:00
root	9656926a07	stream doesn't want to work	2022-10-01 14:30:18 +02:00
root	d7ed57bbdd	openfirewall for owncast and changed domain	2022-09-29 14:18:08 +02:00
revol-xut	cf318b623d	changed port	2022-09-28 14:26:13 +02:00
revol-xut	a9aed45166	ese webite	2022-09-28 14:20:08 +02:00
revol-xut	242e2450d3	add ssh+git source	2022-09-28 13:49:18 +02:00
revol-xut	14d1052f63	basic streaming setup	2022-09-28 08:06:27 +02:00
revol-xut	ea8e8ae966	playing wiht streaming seutp	2022-09-22 10:36:34 +02:00
root	6aec046f12	mediawiki runs	2022-09-07 12:42:14 +02:00
revol-xut	33d823134e	add mediawiki extensions	2022-09-06 20:35:34 +02:00
revol-xut	02ec569565	Merge branch 'main' of github.com:fsr/fruitbasket	2022-09-06 20:29:44 +02:00
revol-xut	77b4930ab3	alot of extra config	2022-09-06 20:29:31 +02:00
Jonas Gaffke	285f92d2a2	manual create postgres user for mediawiki	2022-09-06 17:32:53 +02:00
revol-xut	7114dda9f4	taking users from system user definition	2022-09-06 17:23:55 +02:00
revol-xut	87bd442eed	secrets for mediawiki and formatting	2022-09-06 17:16:31 +02:00
Jonas Gaffke	7131ba8691	add mediawiki	2022-09-06 17:11:05 +02:00
Jonas Gaffke	60db413c9b	add jonasga key	2022-09-06 16:45:21 +02:00
revol-xut	71292a92cb	removed unused secrets	2022-09-06 15:12:46 +02:00
revol-xut	1d4acbb6ac	add hedgedoc module	2022-09-06 15:09:30 +02:00
root	8649d4812d	some minor keycloak changes	2022-09-06 14:00:29 +02:00
revol-xut	99c461e3dd	fixed secret name	2022-08-16 15:42:10 +02:00
revol-xut	806a5078ca	configured sops	2022-08-16 15:40:59 +02:00
revol-xut	6525c45ca2	add basic keycloak config	2022-08-16 15:18:28 +02:00
root	bea16d0652	intial setup of durian	2022-08-16 14:20:36 +02:00
revol-xut	048bd78eeb	added option to toggle office bloat	2022-04-19 16:39:09 +02:00
revol-xut	a8a8e6bad5	added sanddorn config	2022-04-10 13:59:39 +02:00
revol-xut	13a39543f9	added Heiko 2	2022-03-07 15:43:40 +01:00
revol-xut	b29f68f413	added Heiko	2022-03-07 15:31:56 +01:00
revol-xut	52d999c12c	add avahi for printing	2022-03-05 16:14:16 +01:00
revol-xut	88c191c957	add neovim	2022-03-05 15:02:17 +01:00
revol-xut	39c3b042dd	add basic fsr wifi and sops config	2022-03-05 14:53:36 +01:00
revol-xut	1436a56524	adding wifi.nix	2022-03-05 14:18:40 +01:00
Root Birne	607a115378	working birne configuration	2022-03-05 13:56:48 +01:00
revol-xut	030c2566ad	add modules to bringe config	2022-03-04 17:43:03 +01:00
Felix Wittwer	c93fa389b1	Enable automatic upgrade	2021-11-17 14:29:20 +01:00
Felix Wittwer	5cc2751787	Initial commit with a stub for birne	2021-11-17 11:39:34 +01:00