Commit graph

485 commits

Author SHA1 Message Date
Rouven Seifert f1924af906
vaultwarden: don't use staging domain 2023-08-09 15:36:53 +02:00
Rouven Seifert 88ae35d945
add activation script showing updated packages 2023-07-29 17:09:01 +02:00
Rouven Seifert f3aa48f7b4
update bacula mail subject 2023-07-25 11:27:25 +02:00
Rouven Seifert aa65070aa0
fix escaping in bacula mailcommand 2023-07-22 13:24:48 +02:00
Rouven Seifert 0e29e3c27a
configure mails for bacula 2023-07-21 12:30:55 +02:00
Rouven Seifert 03497aebc9
pin bacula to 9.6.7 2023-07-20 23:38:03 +02:00
Rouven Seifert 95fb2ae683
fix hedgedoc database config 2023-07-20 13:00:30 +02:00
Rouven Seifert 7839693bad
Merge pull request #52 from fsr/db-passwords
remove postgresql passwords where they are not needed
2023-07-20 12:48:05 +02:00
Rouven Seifert 10101a9e18
write own bacula config file since the upstream one is broken 2023-07-20 10:14:12 +02:00
Rouven Seifert 8ef5af5305
fix sogo replacements 2023-07-19 17:49:32 +02:00
Rouven Seifert defc2f2324
remove postgresql passwords where they are unneeded 2023-07-19 17:44:49 +02:00
Rouven Seifert 6d28293c86
Merge pull request #42 from fsr/gitea
Add gitea module
2023-07-19 16:19:47 +02:00
Rouven Seifert 9b19e080b0
open firewall for bacula 2023-07-19 16:02:41 +02:00
root 8b30a10c0f bacula fixes 2023-07-19 15:56:07 +02:00
Rouven Seifert 3fef58e888
configure bacula 2023-07-19 15:46:49 +02:00
Lyn Fugmann a2360c9f56
Add gitea module 2023-07-19 15:46:37 +02:00
Rouven Seifert 32b74fefd1
add sane zsh config 2023-07-19 15:01:47 +02:00
Lyn Fugmann da7cbfb98c
nixify portunus seeds 2023-07-19 14:32:06 +02:00
Lyn Fugmann e8263b93dc
Refactor ldap and enable dex
Co-authored-by: revol-xut <revol-xut@protonmail.com>
2023-07-19 14:31:47 +02:00
Rouven Seifert 80d016ae8f
enable mail quotas
Currently set to 10 gigabytes. Nobody I know ever reached that limit, so it should be fine
2023-07-14 15:47:11 +02:00
Rouven Seifert d7e85c3d43
Merge branch 'main' into vaultwarden 2023-07-12 15:54:36 +02:00
Rouven Seifert c0266785cd
Merge branch 'main' into vaultwarden 2023-07-12 15:51:25 +02:00
Rouven Seifert e7adae7b45
add mail settings 2023-07-12 15:46:25 +02:00
Lyn Fugmann 8d84f387f5
Add course-management module 2023-07-12 00:33:53 +02:00
Tassilo Tanneberger 69cf4211a4
Merge pull request #43 from fsr/userdir
Serve public_html directory
2023-07-08 18:47:37 +02:00
Rouven Seifert 2afef761ed
Merge branch 'main' into garbage 2023-07-07 12:16:30 +02:00
Rouven Seifert 1b3ea40f9e
Merge branch 'main' into kpp 2023-07-07 12:10:53 +02:00
Rouven Seifert 105b2a0476
mail: include aliases in local recipient maps 2023-07-07 11:03:57 +02:00
Rouven Seifert 6c542cadb9
fix sending to aliases 2023-07-07 10:14:02 +02:00
Lyn Fugmann 9be95bc7d7
Fix IPv6 mail sending, add noreply alias 2023-07-06 01:10:47 +02:00
Rouven Seifert 0165a0ad2d
removed some unneeded files 2023-07-05 17:15:24 +02:00
Rouven Seifert 1d9359416d
add postmaster alias 2023-07-05 16:21:20 +02:00
Rouven Seifert d5e881c639
use portunus.package to override 2023-07-04 17:06:18 +02:00
Rouven Seifert d94a77d35c
configure kpp 2023-07-04 16:03:10 +02:00
Rouven Seifert 5136effd16
fix the portunus pach 2023-07-04 15:15:58 +02:00
Rouven Seifert 0d7a9738b0
manually patch the portunus regex 2023-07-04 15:10:00 +02:00
Rouven Seifert 8b3e42dbb6
disable mail forwarding 2023-07-04 14:54:59 +02:00
Rouven Seifert 18922904df
vaultwarden: init module 2023-07-04 14:20:55 +02:00
Rouven Seifert 2d431ff526
added sieve 2023-07-04 14:00:06 +02:00
Rouven Seifert 7354c31da8
fixed sogo 2023-07-04 12:45:51 +02:00
Rouven Seifert 566ba5082c
Merge remote-tracking branch 'origin/main' into mailman 2023-07-04 09:41:51 +02:00
Rouven Seifert 13020f8ce3
fix ldap group search 2023-07-04 09:36:08 +02:00
Rouven Seifert 15319c9b2b
various fixes
- fix mailman's confirmation emails not sending
- introduce a stateful /etc/aliases
- configure ldap for postfix
2023-07-03 18:23:36 +02:00
Lyn Fugmann 34de78bee0
Serve public_html directory 2023-06-30 15:42:46 +02:00
Lyn Fugmann eba88a8833
add mautrix-telegram 2023-06-22 20:18:28 +02:00
Rouven Seifert 3ddab16dae
use uid as lpad in 2023-06-13 20:17:20 +02:00
Rouven Seifert 0dd03b0965
enable acme for the ifsr base domain 2023-06-13 19:55:07 +02:00
Rouven Seifert 666e6b4425
enable submission on port 587 2023-06-13 19:55:06 +02:00
Rouven Seifert a9b8875563
reload mail services upon acme renew 2023-06-13 19:55:05 +02:00
Rouven Seifert a44c2e04e2
update mailman ssh settings and add root alias 2023-06-13 19:55:01 +02:00
Rouven Seifert 7331eef574
switch to the 23.05 release 2023-05-25 22:58:14 +02:00
Rouven Seifert 504c89d4e9
revert portunus patch to test other stuff 2023-05-12 15:08:11 +02:00
revol-xut 09330c5204 adding overlay for portunus 2023-04-26 15:42:26 +02:00
Rouven Seifert 1f1229e182
enable https for mailman 2023-04-24 22:30:04 +02:00
Rouven Seifert 5f761825f0
Merge pull request #30 from fsr/mailman
Mailman config
2023-04-24 21:12:15 +02:00
revol-xut 8e1543bb14
nixpkgs fmt 2023-04-23 19:43:53 +02:00
revol-xut 25b6d71896
fixing the secrets 2023-04-13 19:35:10 +02:00
revol-xut de62b47e52
merging with main 2023-04-13 18:56:15 +02:00
revol-xut 9cda0097fc
fixing database string 2023-04-13 18:52:15 +02:00
revol-xut a8824ce574
trying to make sogo a little bit more secure 2023-04-13 18:38:37 +02:00
Rouven Seifert 12f1d690ba
added ldap config to mailman 2023-04-04 14:25:21 +02:00
Rouven Seifert d1fb1b3de1
initial mailman config 2023-04-04 00:04:04 +02:00
Tassilo Tanneberger b9c58f5363
Merge pull request #22 from fsr/mail
[Draft] Fixes for the mail configuration
2023-04-03 23:19:32 +02:00
revol-xut 78dbad50f8 Merge branch 'sogo-test' 2023-04-03 23:14:28 +02:00
revol-xut c813f3ac83
fixing secrets for sogo 2023-04-03 23:14:12 +02:00
Tassilo Tanneberger 7dffd30187
Merge pull request #29 from fsr/sogo-test
Sogo Module implementation
2023-04-03 23:05:28 +02:00
revol-xut e37482ef0a
nixpkgs fmt 2023-04-03 23:05:00 +02:00
Rouven Seifert 7c947ab23a
fix the domain name 2023-03-26 15:12:54 +02:00
Rouven Seifert 250ee8b01b
formatting 2023-03-24 17:06:40 +01:00
Rouven Seifert 214c0d525d
basic ftp config 2023-03-24 17:05:30 +01:00
Rouven Seifert 1a16265222
added important aliases 2023-03-24 16:24:18 +01:00
Rouven Seifert 36dbc82c75
fix homedir mailboxes 2023-03-24 15:51:57 +01:00
Rouven Seifert e63e4d760c
use homedir mailboxes 2023-03-24 15:21:04 +01:00
Rouven Seifert 8f0f55a5ee
missing lib fix 2023-03-24 15:21:03 +01:00
Rouven Seifert dd6374d371
postfix security enhancements 2023-03-24 15:21:02 +01:00
Rouven Seifert 041628def7
fixed dkim 2023-03-24 15:21:01 +01:00
Rouven Seifert eee6282d69
mail: better ldap query and port fixes 2023-03-24 15:20:56 +01:00
tenksom 6ab7985a6a Fixed wrong port 2023-03-22 12:09:21 +01:00
tenksom c83ea08ee8 added timezone and vhostname 2023-03-22 11:24:14 +01:00
Rouven Seifert 0ed90c8122
fixed homedir creation for sshd 2023-03-10 16:38:57 +01:00
Rouven Seifert adf2320e4a
create a home dir upon login 2023-03-10 16:15:53 +01:00
Rouven Seifert 8a2f5c7061
removed garbage 2023-03-10 15:47:56 +01:00
tenksom 6e36183995
Adding new lines for postgresql 2023-03-07 17:59:22 +01:00
tenksom 4f5137c6b9
Adding ldap, nginx, postgresql config in SOGo 2023-03-07 13:06:24 +01:00
tenksom a3f4e289e1
The born of sogo 2023-03-01 18:44:56 +01:00
Rouven Seifert c06161a62a
anonymize ip adresses in nginx logs 2023-03-01 16:40:45 +01:00
Lyn Fugmann e9674b5b0e
configure ldap for hedgedoc (config adapted from kaki) 2023-02-27 11:08:21 +01:00
Rouven Seifert 0d08565be8
revert maildir to /var/mail 2023-02-17 13:54:14 +01:00
Rouven Seifert 9dc63921b8
fix hedgedoc 2023-02-15 15:53:15 +01:00
Rouven Seifert 97dc538040
fixed matrix ldap integration 2023-02-15 15:33:27 +01:00
Rouven Seifert 4945efdea7
fixed dovecot ldap queries 2023-02-15 15:14:57 +01:00
Rouven Seifert 593c324210
catting out the password doesn't work 2023-02-15 14:47:14 +01:00
Rouven Seifert f04eb43459
fixed dovecot ldap 2023-02-15 14:40:37 +01:00
revol-xut 82f47b66cb
formatting 2023-02-15 13:20:23 +01:00
Rouven Seifert bb23a7f67a
fixing the ldap user and temp disabling tls 2023-02-15 11:29:47 +01:00
Rouven Seifert f1b22088c2
format fix 2023-02-03 16:09:41 +01:00
Rouven Seifert 58449429b9
changed maildir to /var/lib/mail, rspamd fixes 2023-02-03 16:04:45 +01:00
Rouven Seifert b600c70202
formatting 2023-02-03 15:50:36 +01:00
Rouven Seifert e893690e1d
use search user for ldap 2023-02-03 15:47:17 +01:00
Rouven Seifert 4e687b1484
some ldap config 2023-02-03 15:47:16 +01:00
Rouven Seifert b74d72f722
configured dkim signing 2023-02-03 15:47:15 +01:00
Rouven Seifert 2411a9c185
finished rspamd setup 2023-02-03 15:47:14 +01:00
Rouven Seifert a11a3614a9
configured tls and rspamd 2023-02-03 15:47:10 +01:00
Rouven Seifert e569bdec50
formatting 2023-02-03 15:44:31 +01:00
Rouven Seifert 2a0e2c6623
add mail filters 2023-02-03 15:44:29 +01:00
Rouven Seifert 14ad30e65d
beautified the file and added opendkim 2023-02-03 15:44:28 +01:00
Rouven Seifert ffae1bc8c5
receiving emails works now 2023-02-03 15:44:27 +01:00
Rouven Seifert 1f70d58853
Initial Email config
Bare-minimum config consisting of postfix and dovecot2.
For testing, passwd is used as userdb. Definitely NOT Production ready!
2023-02-03 15:44:26 +01:00
revol-xut c41369e2ac
enabeling ldap auth 2023-02-03 15:40:42 +01:00
Lyn Fugmann eeac519650
move matrix-synapse-ldap3.nix to /pkgs 2023-02-02 21:16:55 +01:00
Lyn Fugmann fab0899e7e
package ldap3 plugin 2023-01-21 21:26:24 +01:00
Lyn Fugmann c3134e1e58
Synapse LDAP config, add Portunus search user, update flake 2023-01-18 14:12:03 +01:00
Lyn Fugmann 4813ec4811
Merge branch 'main' into matrix 2022-12-17 21:39:37 +01:00
Lyn Fugmann ce7db4dac5
format, use domain option 2022-12-17 21:23:46 +01:00
halcyon 924ac7ee31
fix: set portunus port to 8081 2022-12-17 21:03:54 +01:00
Lyn Fugmann 509cfd4121
Merge branch 'main' into matrix 2022-12-17 21:02:56 +01:00
halcyon fc873af4b3
fix: remove open port 636, potential security risk 2022-12-17 19:45:53 +01:00
halcyon cd1647e5d6
fix: remove unneeded /dex reverse proxy 2022-12-17 19:45:06 +01:00
halcyon c91bcb11f8
fix: seedPath string -> path 2022-12-17 19:44:16 +01:00
halcyon 86295b5501
use config.fsr.domain 2022-12-17 19:21:16 +01:00
halcyon 3d8b8089d6
merge main into ldap 2022-12-17 19:17:52 +01:00
revol-xut 141bdb9737
adding option for domain 2022-12-17 19:12:41 +01:00
Lyn Fugmann 565bcae081
add matrix configuration 2022-12-17 19:11:37 +01:00
halcyon e1c992f50a
clean up ldap.nix 2022-12-17 19:04:45 +01:00
halcyon 2f8d5b8949
remove users.ldap config 2022-12-17 19:03:02 +01:00
halcyon eece008de6
add admin user with sops secured password 2022-12-17 18:48:30 +01:00
halcyon f3ac390cf9
add portunus seeds file with basic groups, no users 2022-12-17 18:27:16 +01:00
halcyon db63f4eb8d
format ldap.nix 2022-12-17 17:42:10 +01:00
halcyon 29e69b67ed
expanded portunus config
- daclaritve portunus and openldap users/groups
- basic sops stuff

still needs discussion
2022-12-17 13:58:06 +01:00
halcyon 00291f7e9f
basic ldap/portunus config
- config im moment nur auf meiner infra funktionstauglich,
  login auf website funktioniert
- keine integrations getestet
2022-12-02 14:25:55 +01:00
Lyn Fugmann 61059500cd
fix hedgedoc 2022-11-18 19:08:43 +01:00
revol-xut 231d82029d
updating flake and pinning to 22.05 2022-11-18 17:51:09 +01:00
revol-xut ba27089255
formatting and clean up 2022-11-18 17:45:03 +01:00
Tassilo Tanneberger 5f5f06dbdb
Merge pull request #7 from fsr/nextcloud 2022-11-18 17:41:42 +01:00
Lyn Fugmann 970f1180cc
add comments 2022-11-18 17:40:12 +01:00
revol-xut 575c1959f9
adding ssh into base.nix 2022-11-18 17:15:22 +01:00
Lyn Fugmann 67a76a0b2e
fix tabs 2022-11-18 17:13:58 +01:00
Lyn Fugmann 6f3bdbc456
add nextcloud config 2022-11-18 17:00:50 +01:00
revol-xut 0a2f59ddc5
resolving merge conflicts 2022-11-18 16:33:54 +01:00
Simon Bruder 474acca4e4
add ssh and pgp key 2022-11-18 15:12:13 +01:00
halcyon c6534b0fbb
add gpg and ssh keys for jonas 2022-11-11 21:19:50 +01:00
revol-xut 3ac8ef4490
resolved merge conflicts 2022-11-11 16:41:15 +01:00
revol-xut 7279ea13e9
more test vm config 2022-11-11 16:39:48 +01:00
revol-xut ab8e827aca
fixed typo and added test vm 2022-11-11 16:38:54 +01:00
blackblack-berry a777d9c708 added ssh and pgp keys 2022-11-11 16:33:01 +01:00
Rouven Seifert 31b584f054
added gpg and ssh keys for rouven 2022-11-11 16:24:48 +01:00
Lyn Fugmann 09b40f4a15
add pgp and ssh keys 2022-11-11 15:37:17 +01:00
revol-xut 5b6ff8f662
moved ssh and gpg keys around 2022-11-05 11:44:53 +01:00
revol-xut 877da5918f
removed some config from streaming setup 2022-10-18 10:52:48 +02:00
revol-xut 909f827b10
adding sebastians ssh key 2022-10-18 10:48:51 +02:00
root 9656926a07 stream doesn't want to work 2022-10-01 14:30:18 +02:00
root d7ed57bbdd openfirewall for owncast and changed domain 2022-09-29 14:18:08 +02:00
revol-xut cf318b623d
changed port 2022-09-28 14:26:13 +02:00
revol-xut a9aed45166
ese webite 2022-09-28 14:20:08 +02:00
revol-xut 242e2450d3
add ssh+git source 2022-09-28 13:49:18 +02:00
revol-xut 14d1052f63
basic streaming setup 2022-09-28 08:06:27 +02:00
revol-xut ea8e8ae966
playing wiht streaming seutp 2022-09-22 10:36:34 +02:00
root 6aec046f12 mediawiki runs 2022-09-07 12:42:14 +02:00
revol-xut 33d823134e
add mediawiki extensions 2022-09-06 20:35:34 +02:00
revol-xut 02ec569565 Merge branch 'main' of github.com:fsr/fruitbasket 2022-09-06 20:29:44 +02:00
revol-xut 77b4930ab3
alot of extra config 2022-09-06 20:29:31 +02:00
Jonas Gaffke 285f92d2a2 manual create postgres user for mediawiki 2022-09-06 17:32:53 +02:00
revol-xut 7114dda9f4
taking users from system user definition 2022-09-06 17:23:55 +02:00
revol-xut 87bd442eed
secrets for mediawiki and formatting 2022-09-06 17:16:31 +02:00
Jonas Gaffke 7131ba8691 add mediawiki 2022-09-06 17:11:05 +02:00
Jonas Gaffke 60db413c9b add jonasga key 2022-09-06 16:45:21 +02:00
revol-xut 71292a92cb
removed unused secrets 2022-09-06 15:12:46 +02:00
revol-xut 1d4acbb6ac
add hedgedoc module 2022-09-06 15:09:30 +02:00
root 8649d4812d some minor keycloak changes 2022-09-06 14:00:29 +02:00
revol-xut 99c461e3dd
fixed secret name 2022-08-16 15:42:10 +02:00
revol-xut 806a5078ca
configured sops 2022-08-16 15:40:59 +02:00
revol-xut 6525c45ca2
add basic keycloak config 2022-08-16 15:18:28 +02:00
root bea16d0652 intial setup of durian 2022-08-16 14:20:36 +02:00
revol-xut 048bd78eeb
added option to toggle office bloat 2022-04-19 16:39:09 +02:00
revol-xut a8a8e6bad5
added sanddorn config 2022-04-10 13:59:39 +02:00
revol-xut 13a39543f9
added Heiko 2 2022-03-07 15:43:40 +01:00
revol-xut b29f68f413
added Heiko 2022-03-07 15:31:56 +01:00
revol-xut 52d999c12c
add avahi for printing 2022-03-05 16:14:16 +01:00
revol-xut 88c191c957
add neovim 2022-03-05 15:02:17 +01:00
revol-xut 39c3b042dd
add basic fsr wifi and sops config 2022-03-05 14:53:36 +01:00
revol-xut 1436a56524
adding wifi.nix 2022-03-05 14:18:40 +01:00
Root Birne 607a115378 working birne configuration 2022-03-05 13:56:48 +01:00
revol-xut 030c2566ad
add modules to bringe config 2022-03-04 17:43:03 +01:00
Felix Wittwer c93fa389b1
Enable automatic upgrade 2021-11-17 14:29:20 +01:00
Felix Wittwer 5cc2751787
Initial commit with a stub for birne 2021-11-17 11:39:34 +01:00