4e1cf47b7b
mail: test rspamd signing with rspamd
2024-03-04 12:08:50 +01:00
0cf95c4c34
Add hendrik's pgp and ssh keys
2024-02-29 16:24:21 +01:00
4f5148fbf4
Show warning when kernel version changes
2024-02-29 12:03:02 +01:00
7f70ae990c
ftp: custom 403 error page
2024-02-27 14:06:06 +01:00
794b565e07
nix-serve: fix port
2024-02-25 23:16:47 +01:00
a364e28bb8
nix-serve: init at cache.ifsr.de
2024-02-25 23:10:43 +01:00
f9fca746f7
decisions: fix secret
2024-02-22 12:20:21 +01:00
d84ad31126
mail: configure optional archive mailbox
...
This enables the 'Archive' special use for Mailboxes according to
RFC 6154 [0]. Most Mailclients support this out of the box
[0] https://www.rfc-editor.org/rfc/rfc6154.html
2024-02-21 14:02:26 +01:00
22ca2010a0
initrd: fix command to unlock disk
2024-02-19 11:35:22 +01:00
fecff52804
ewsp: fix nginx group
2024-02-18 14:58:29 +01:00
tenksom
a97f94e4b1
fixed nginx group for nightline
2024-02-18 12:54:21 +01:00
b9a216ad59
decisions: add dex openid connect client
2024-02-05 22:01:11 +01:00
quitte
ef42822101
Merge branch 'main' of github.com:fsr/fruitbasket
2024-02-04 13:08:18 +01:00
quitte
bf6585a833
decisions: fix typs
2024-02-04 13:08:14 +01:00
quitte
594e672df4
decisions: add timer for tex to db
2024-02-04 13:07:41 +01:00
6d6585c78f
formatting
2024-02-03 20:49:47 +01:00
81a83d7989
strukturbot: move to quitte
2024-02-03 20:48:34 +01:00
826758e138
decisions: init secrets
2024-02-03 20:17:06 +01:00
cd10890f1b
decisions: init
2024-02-03 20:05:52 +01:00
2e5f4fbe23
nextcloud: deprecate oc.ifsr.de
2024-02-02 21:53:54 +01:00
e198002d60
mysql: enable backups
2024-02-02 21:41:44 +01:00
e70b57490e
formatting
2024-02-02 21:18:42 +01:00
5b2ca5141c
mysql: bind to localhost
2024-02-02 21:13:44 +01:00
c0c9249e5a
remove old wiki module
2024-02-02 21:09:58 +01:00
e1325a329a
wiki: move to wiki
2024-02-02 21:08:30 +01:00
454394981e
quitte: add nightline and fsrewsp sites
2024-02-02 20:26:37 +01:00
dbe12fbfeb
ese: move to quitte
2024-02-02 19:54:06 +01:00
cc09c14143
quitte: add mysql
2024-02-02 17:41:34 +01:00
b8c31b4e4a
initrd: fix network
2024-01-29 16:23:56 +01:00
ccd6290fb7
Merge pull request #81 from fsr/initrd-ssh
...
quitte: enable ssh in initrd
2024-01-29 16:11:00 +01:00
48683c6b2f
nextcloud: update to nextcloud28
2024-01-29 16:04:51 +01:00
0e2d68fb26
postfix: fix format
2024-01-28 14:26:12 +01:00
583990556e
postfix: lift message size limit
2024-01-28 14:25:02 +01:00
316ffbb9e0
quitte: enable ssh in initrd
2024-01-25 19:40:22 +01:00
ffeb47cd5e
verify mail senders
2024-01-24 16:02:58 +01:00
93baff94f1
formatting
2024-01-13 17:40:20 +01:00
01f5df464f
zammad: set loglevel to warn
2024-01-13 17:36:22 +01:00
1d4da79c16
fix forgejo homedir
2024-01-10 15:23:56 +01:00
94c2a2de5d
fix integer formatting
2024-01-07 01:22:42 +01:00
d6571ac695
bacula: restrict port to agdsn networks
2024-01-07 01:16:37 +01:00
0084a02568
git: set loglevel to WARN
...
- gitea is crawled by some bots and logs every request
2024-01-06 16:07:48 +01:00
bde7d0b3d4
matrix: disable spammy logging
2024-01-06 16:01:32 +01:00
9f465f4f66
dex: customize login page
2024-01-05 16:49:29 +01:00
quitte
693154fe1a
padlist: dex openid connect login instead of basic auth
2024-01-05 15:57:32 +01:00
2ed00fb4c0
quitte: add vscode server
2024-01-01 17:23:01 +01:00
86cd033cba
forgejo: fix prestart
2023-12-26 17:56:32 +01:00
b8e950d5d0
postfix: apply fix against smtp mail smuggling
2023-12-22 23:39:09 +01:00
12fd11d18e
postgres: fix table names in backup
2023-12-18 12:06:09 +01:00
11bdb6b8f7
zsh: disable root git reminder
2023-12-18 12:04:35 +01:00
cc39b86e78
base: add unzip package
2023-12-15 16:03:17 +01:00
956908e981
userdir: add robots.txt
2023-12-15 15:48:40 +01:00
9607dd1b54
wiki: format
2023-12-15 12:05:43 +01:00
3aeec71dd4
wiki: add SyntaxHighlight extension
2023-12-15 12:02:15 +01:00
5ce0b2d4ec
wiki: update extensions
2023-12-15 11:19:38 +01:00
7022528b62
fix phil postgres
2023-12-14 17:32:13 +01:00
f57babf97c
use new bacula fixes
2023-12-14 15:51:52 +01:00
8acfe6ee0c
fix checks
2023-12-14 15:42:10 +01:00
2eb832c8a9
better homedir creation
2023-12-12 13:04:03 +01:00
1789ac741d
formatting
2023-12-12 13:01:08 +01:00
220136af25
tomate: init sssd
2023-12-12 12:57:47 +01:00
2b5706b987
zammad: enable backup
2023-11-29 23:29:59 +01:00
fd5e0108f6
quitte: allow ldaps access
2023-11-28 23:00:41 +01:00
964183a0e7
userdir: increase upload size limit
2023-11-28 18:34:51 +01:00
e86fdf1819
tomate: init
2023-11-28 11:37:35 +01:00
b972d22997
matrix: use upstream ldap plugin
...
it has been updated and supports reading bind_password from a file now
2023-11-17 20:38:36 +01:00
quitte
8a8af52ec7
zammad: init
2023-11-17 18:18:35 +01:00
127ab9d92e
rspamd: add more headers
2023-11-16 00:07:22 +01:00
7ad0c7d98e
bacula: close udp port
...
not needed for operation
2023-11-14 13:20:41 +01:00
121a9f001e
ssh: enable mosh
2023-11-13 14:20:18 +01:00
fe946150d7
nginx: refactor, remove hard coded vhost names
2023-11-13 11:12:58 +01:00
87a5486114
nginx: fix newline
2023-11-13 10:04:12 +01:00
075bc2b6fa
nginx: split logs per vhost
2023-11-13 09:51:07 +01:00
3e70f7a0fc
element-web: disable identity server
2023-11-10 15:42:58 +01:00
2496192efc
nextcloud: configure redis
2023-11-09 18:03:04 +01:00
5de01790c4
nextcloud: enable HEIC image preview
2023-11-09 15:35:26 +01:00
0dab62ebff
postgres: increse max_connections to 1000
2023-11-09 15:29:42 +01:00
7e17d77b1d
nextcloud: migration changes
2023-11-08 18:40:11 +01:00
0eeac8391d
mail: enable imap_filter_sieve
2023-11-03 11:08:42 +01:00
85e6ebbc29
fail2ban: disable tor lists
...
some people have legimitate interest in accessing our services via tor
in case of abuse out of these networks this commit can be reverted
2023-11-02 22:50:23 +01:00
a9d4543da7
rspamd: whitelist tu networks
2023-11-01 22:45:21 +01:00
dd50175c58
httpd: limit number of spawned processes
2023-10-28 17:35:14 +02:00
245d5bc498
fail2ban: use nftables
2023-10-28 17:34:55 +02:00
7b3925deca
courses-phil: use systemd credentials to load the secrets
2023-10-23 15:08:33 +02:00
8eaf733126
fail2ban: whitelist tu ranges
2023-10-23 11:57:01 +02:00
0899143b8c
formatting
2023-10-23 10:47:40 +02:00
303888dfd9
nixify the manual
2023-10-23 10:27:30 +02:00
75be7e22a3
mail: add keyword blacklist
2023-10-21 00:49:24 +02:00
quitte
5270ab09e6
add btop package
2023-10-20 21:38:28 +02:00
3763b8b106
fail2ban: enable incremental bantime
2023-10-20 16:57:02 +02:00
a8d1444ef9
Merge pull request #76 from fsr/fail2ban-mail
...
fail2ban: setup postfix and dovecot
2023-10-20 12:27:58 +02:00
0712f02d40
fail2ban: setup postfix and dovecot
2023-10-19 14:24:11 +02:00
quitte
2058b8f955
add infoscreen, manual and sharepic websites
2023-10-19 11:54:15 +02:00
c360abe7d9
ftp: remove TUD private subnet
...
was added on kaki back then. Probably because of some routing misconfigurations
let's embrace some hope that this is now fixed
2023-10-18 23:30:16 +02:00
ddc7179312
kanboard: add short domain
2023-10-16 11:59:06 +02:00
quitte
94c9be356c
kanboard: first version
2023-10-15 13:38:48 +02:00
quitte
8c7ffab70e
mautrix-telegram: enable again and small fix
2023-10-09 21:19:05 +02:00
3d18969471
nginx: disable ip anonymizing
2023-10-08 13:43:04 +02:00
5820741dd2
matrix: move to ifsr.de
2023-10-08 13:42:29 +02:00
d48fb6c13a
setup fail2ban
...
block tor exit nodes
2023-10-04 18:49:12 +02:00
23fb7747fb
Revert "temporarily show participants again in the course-management"
...
This reverts commit 39db962a2c
2023-10-02 17:32:52 +02:00
quitte
a9c8c03f08
userdir: disable php error display
2023-10-01 19:17:29 +02:00
39db962a2c
temporarily show participants again in the course-management
2023-09-29 17:49:45 +02:00
quitte
6d277b6814
courses-phil: add redirects
2023-09-28 13:34:58 +02:00
quitte
3c17c0ad6a
course-phil: on-metal fixes
2023-09-27 15:08:12 +02:00
a5d29c3338
sops: set sopsfile
2023-09-27 14:25:03 +02:00
8908b3bbff
courses: phil: init as container
2023-09-27 14:20:11 +02:00
e4b26a640b
mail: set mailUser and mailGroup
2023-09-27 11:12:07 +02:00
aa1f91c5b4
mail: fix typo
2023-09-27 11:04:37 +02:00
201fef3084
added global spam filtering script
2023-09-27 11:03:10 +02:00
71f4c64022
nextcloud upgrade to 27
2023-09-24 16:06:10 +02:00
1b36010ad9
mail: disable pam authentication
2023-09-22 13:46:49 +02:00
92efae76ed
rspamd: formatting fix
2023-09-21 21:50:36 +02:00
7c15108f3d
rspamd: enable the neural module
...
so we can throw some buzzwords
2023-09-21 21:49:00 +02:00
3b59947673
rspamd: configure dynamic blacklisting
2023-09-21 21:20:48 +02:00
quitte
b35703040b
nix: allow fetching the index from github
2023-09-20 22:20:49 +02:00
quitte
bed0f24e94
format
2023-09-20 14:09:55 +02:00
quitte
e739a60e66
userdir, zsh fixes
2023-09-20 14:07:50 +02:00
06ec7d6e32
fix double promptinit
2023-09-19 21:08:53 +02:00
0197610e3f
fix promptinit
2023-09-19 20:44:11 +02:00
dc65c4c5c7
don't use zsh as the default shell
2023-09-19 20:30:30 +02:00
e4e1cfd3d6
zsh: add agdsn config and comma
2023-09-19 16:03:41 +02:00
Hendrik Wolff
da97f9e750
mail: Enable listescape globally
2023-09-19 14:37:07 +02:00
quitte
77c2248eee
add helix editor
2023-09-19 10:33:03 +02:00
9393915efe
mail: disable the quota check for now
2023-09-18 09:48:55 +02:00
3c98566664
Merge pull request #67 from fsr/domain-refactor
...
Remove fsr domain option and use the native networking ones
2023-09-17 20:31:03 +02:00
02cd8440f1
refactor: ran deadnix
2023-09-17 20:14:32 +02:00
62825e357f
refactor: fsr.domain -> networking.domain
2023-09-17 20:10:55 +02:00
Hendrik Wolff
b357dd8590
mail: Fix formatting of extraConfig
2023-09-17 17:05:02 +02:00
Hendrik Wolff
7ba1281909
mail: Enable the listescape plugin
...
Make it possible to use special characters like `.` in mail directories.
2023-09-17 16:40:12 +02:00
220575d64b
formating
2023-09-17 16:01:51 +02:00
quitte
a830d97bf9
mail migration: on-metal fixes
2023-09-17 16:00:19 +02:00
quitte
e26b2c1ebe
userdir: fix 403
2023-09-17 14:28:13 +02:00
b26bb94495
userdir: fix autoindex
2023-09-16 19:39:09 +02:00
460f9c46b3
make givenname optional in web interface
2023-09-15 19:24:27 +02:00
0c12c14148
patch portunus to make givenname optional
2023-09-15 13:26:45 +02:00
b224f278c9
matrix, nextcloud: pin domain to staging
2023-09-15 13:04:24 +02:00
4447cf06c4
manage all aliases in /etc/aliases
2023-09-15 12:56:19 +02:00
5a49b73b33
postgres backup: add mailman
2023-09-14 16:03:29 +02:00
fcb4c6a36d
mailman: use postgresql
2023-09-14 14:54:09 +02:00
8eb6545fc3
nextcloud: add legacy redicect
2023-09-06 14:22:56 +02:00
d8e3bb4689
Merge pull request #61 from fsr/imap-sieve
...
Mail: enable spam training through imap-sieve
2023-09-06 12:29:24 +02:00
25d7e1bf63
ssh: add new key for rouven
2023-09-06 12:22:42 +02:00
11b0903535
mail: put spam sieve scripts into /etc
2023-09-04 13:10:01 +02:00
a0f78133f6
mail: automatically subscribe to all important mailboxes and expunge spam
2023-09-04 11:58:23 +02:00
76e5801d87
mail: enable spam training through imap-sieve
2023-09-04 11:58:22 +02:00
de6c5b4abf
mail: rename header x-spam to x-spam-flag
2023-09-04 10:45:21 +02:00
04e983deb1
mail: enable spamassasin style spam headers
2023-09-04 10:29:44 +02:00
99100ac27d
sogo: remove duplicate spam folder
2023-09-03 22:56:26 +02:00
b68a325a3f
Merge remote-tracking branch 'origin/portunus-fixes'
2023-09-03 18:58:13 +02:00
4c64f28a41
mail: clean sender data using header checks
2023-09-01 11:02:13 +02:00
6dd628403c
networking: introduce rdns option
2023-09-01 10:42:22 +02:00
b3254db337
mail: update smtp_helo_hostname to match rDNS
2023-09-01 10:06:47 +02:00
7fdb6f9218
portunus: add patch to fix non-ascii character bug
2023-09-01 00:14:41 +02:00
quitte
202381d181
Merge remote-tracking branch 'origin/nextcloud'
2023-08-31 21:27:58 +02:00
39b54503d4
nextcloud: pin to version 25 for migration
2023-08-30 14:01:49 +02:00
5ee9193a23
kpp: add redirect
2023-08-29 12:29:22 +02:00
1a47ab4e52
kpp: move to ifsr.de
2023-08-29 12:27:13 +02:00
a83e2d7506
website: add bbb redirect
2023-08-28 19:19:19 +02:00
1ba207e1c0
wiki: add vernetzung redirect
...
stura complained, actual wiki is on durian
2023-08-28 17:37:11 +02:00
quitte
edc25956f5
wiki: add logo
2023-08-26 17:15:10 +02:00
quitte
eadeaf4229
ldap: fix group syncing
2023-08-25 15:01:52 +02:00
3dca54ace0
pad: set the listed tag by default
2023-08-24 20:36:30 +02:00
quitte
7fb4fa12ed
undo formatting mistake
2023-08-24 16:48:19 +02:00
quitte
7d2c00ef1f
nginx: fix regexes
2023-08-24 16:28:07 +02:00
ebb066c027
enable free url
2023-08-24 16:25:15 +02:00
d669f15c49
website: pad: redirect legacy codimd pads
2023-08-24 15:33:52 +02:00
2ea2341e1b
nextcloud: change ldap user filter to posixAccount
2023-08-23 22:52:53 +02:00
91e5639123
nextcloud: refactor
...
- simplify database config
- run the whole preStart script as sudo, to reduce log clutter
2023-08-23 22:12:06 +02:00
46040f8d31
nextcloud: configure ldap automatically via nextcloud-occ cli
2023-08-23 20:56:24 +02:00
quitte
0eeb60a281
hydra: ldap fixes
2023-08-23 17:12:08 +02:00
d90e705738
hydra: init
2023-08-23 16:53:43 +02:00
quitte
1f450f35f8
wiki: fix images
2023-08-23 16:34:42 +02:00
quitte
af6119a0ec
wiki: set default theme
2023-08-23 15:26:58 +02:00
edac0c3eba
pads: move to ifsr.de
2023-08-23 15:17:12 +02:00
b4d8a71c65
wiki: move to ifsr.de
2023-08-22 16:55:03 +02:00
6500dd04b6
wiki: add redirects
2023-08-22 16:29:09 +02:00
d188722565
Merge pull request #55 from fsr/padlist
...
Add pad lister tool
2023-08-22 15:43:29 +02:00
5c1af65721
padlist: configure ldap authentication
2023-08-22 15:37:42 +02:00
a555a005e1
ldap: simplify homedir creation
2023-08-22 15:25:33 +02:00
6887bae0a3
padlister: init
2023-08-22 14:55:56 +02:00
72bac64809
ftp: formatting -_-
2023-08-22 14:35:26 +02:00
897410f8df
ftp: enable fancy index
2023-08-22 14:32:23 +02:00
7a902d6b8d
ftp: move to ifsr.de
2023-08-22 14:21:24 +02:00
ee9d1abb68
courses: start after postgres
2023-08-21 12:10:44 +02:00
8e2f284201
postgres: backup: specify databases
2023-08-21 11:48:03 +02:00
cdd10f5372
postgres: enable backups
2023-08-21 11:40:56 +02:00
ca5d374f51
stream: move to ifsr.de
2023-08-17 13:50:57 +02:00
fff575342d
wiki: add comments
2023-08-16 15:41:01 +02:00
84a690bd52
wiki: start after postgres
2023-08-16 15:41:00 +02:00
e6948b1fa1
wiki: add VisualEditor plugin
2023-08-16 15:40:59 +02:00
aaab6ef91c
wiki: configure oidc auth
2023-08-16 15:40:43 +02:00
11be7f44c1
Patch Portunus to allow using both insecure ldap and ldaps at once
2023-08-16 15:39:52 +02:00
c992331bbd
Fix wiki setup and database connection
2023-08-16 15:39:39 +02:00
quitte
5bc34bdbdb
fixed ifsrde index
2023-08-16 15:11:27 +02:00
38c947fe01
remove the vm
2023-08-16 14:51:01 +02:00
quitte
606c7185e0
on-metal updates
...
- grav fixes
- course management migration
2023-08-16 14:21:56 +02:00
89404e80d3
include uptsream nginx config for grav
2023-08-16 13:57:10 +02:00
aaf49311fc
ssl for the website
2023-08-16 13:28:43 +02:00
f8684b8be9
initial website configuration
2023-08-16 13:24:56 +02:00
8e85ef6281
secret rotation
...
- removed all non-admin keys from ssh and sops
- rotated sops keys
- regenerated secrets
2023-08-14 11:31:18 +02:00
