Commit graph

523 commits

Author SHA1 Message Date
2d73376a60
tomate: enable fail2ban 2023-11-28 22:44:12 +01:00
964183a0e7
userdir: increase upload size limit 2023-11-28 18:34:51 +01:00
549fffcab2
Merge pull request #77 from fsr/tomate
tomate: init
2023-11-28 11:57:42 +01:00
8b9099fe04
tomate: remove fsr from wheel 2023-11-28 11:48:11 +01:00
7197d6b2e2
tomate: add missing modules 2023-11-28 11:42:50 +01:00
71f197c2f5
tomate: reformat 2023-11-28 11:40:04 +01:00
e86fdf1819
tomate: init 2023-11-28 11:37:35 +01:00
e04914e30d
nix: flake update 2023-11-20 21:30:37 +01:00
b972d22997
matrix: use upstream ldap plugin
it has been updated and supports reading bind_password from a file now
2023-11-17 20:38:36 +01:00
quitte
8a8af52ec7 zammad: init 2023-11-17 18:18:35 +01:00
65b2bff6b1
nix: flake update 2023-11-16 15:59:47 +01:00
127ab9d92e
rspamd: add more headers 2023-11-16 00:07:22 +01:00
4324dceddc
firewall: stop logging every refused connection 2023-11-14 14:00:22 +01:00
7ad0c7d98e
bacula: close udp port
not needed for operation
2023-11-14 13:20:41 +01:00
121a9f001e
ssh: enable mosh 2023-11-13 14:20:18 +01:00
fe946150d7 nginx: refactor, remove hard coded vhost names 2023-11-13 11:12:58 +01:00
87a5486114
nginx: fix newline 2023-11-13 10:04:12 +01:00
075bc2b6fa
nginx: split logs per vhost 2023-11-13 09:51:07 +01:00
3e70f7a0fc
element-web: disable identity server 2023-11-10 15:42:58 +01:00
fd9e9c8b0b
nix: flake update 2023-11-10 00:03:41 +01:00
2496192efc nextcloud: configure redis 2023-11-09 18:03:04 +01:00
5de01790c4 nextcloud: enable HEIC image preview 2023-11-09 15:35:26 +01:00
0dab62ebff postgres: increse max_connections to 1000 2023-11-09 15:29:42 +01:00
7e17d77b1d
nextcloud: migration changes 2023-11-08 18:40:11 +01:00
faddb9ea87
nix: flake update 2023-11-05 19:22:59 +01:00
0eeac8391d mail: enable imap_filter_sieve 2023-11-03 11:08:42 +01:00
85e6ebbc29
fail2ban: disable tor lists
some people have legimitate interest in accessing our services via tor
in case of abuse out of these networks this commit can be reverted
2023-11-02 22:50:23 +01:00
a9d4543da7
rspamd: whitelist tu networks 2023-11-01 22:45:21 +01:00
c038ea7ed9
nix: flake update 2023-10-28 17:36:10 +02:00
dd50175c58
httpd: limit number of spawned processes 2023-10-28 17:35:14 +02:00
245d5bc498
fail2ban: use nftables 2023-10-28 17:34:55 +02:00
9a5d048676
hydra: disable
Not in use and spams database connections
2023-10-28 17:34:07 +02:00
7b3925deca
courses-phil: use systemd credentials to load the secrets 2023-10-23 15:08:33 +02:00
6e269d8dc7
firewall: use nftables 2023-10-23 11:59:12 +02:00
8eaf733126
fail2ban: whitelist tu ranges 2023-10-23 11:57:01 +02:00
0899143b8c
formatting 2023-10-23 10:47:40 +02:00
303888dfd9
nixify the manual 2023-10-23 10:27:30 +02:00
75be7e22a3
mail: add keyword blacklist 2023-10-21 00:49:24 +02:00
5171b2f443
nix: flake update 2023-10-21 00:05:29 +02:00
quitte
5270ab09e6 add btop package 2023-10-20 21:38:28 +02:00
3763b8b106
fail2ban: enable incremental bantime 2023-10-20 16:57:02 +02:00
a8d1444ef9
Merge pull request #76 from fsr/fail2ban-mail
fail2ban: setup postfix and dovecot
2023-10-20 12:27:58 +02:00
0712f02d40
fail2ban: setup postfix and dovecot 2023-10-19 14:24:11 +02:00
quitte
2058b8f955 add infoscreen, manual and sharepic websites 2023-10-19 11:54:15 +02:00
c360abe7d9
ftp: remove TUD private subnet
was added on kaki back then. Probably because of some routing misconfigurations
let's embrace some hope that this is now fixed
2023-10-18 23:30:16 +02:00
5d01d02db4
nix: flake update 2023-10-17 19:11:36 +02:00
ddc7179312
kanboard: add short domain 2023-10-16 11:59:06 +02:00
quitte
94c9be356c kanboard: first version 2023-10-15 13:38:48 +02:00
quitte
5bdd64666f disable stream ese is over 2023-10-15 11:35:37 +02:00
58acf5b98a
nix flake update 2023-10-12 23:25:54 +02:00