Commit graph

312 commits

Author SHA1 Message Date
Rouven Seifert edac0c3eba
pads: move to ifsr.de 2023-08-23 15:17:12 +02:00
Rouven Seifert b4d8a71c65
wiki: move to ifsr.de 2023-08-22 16:55:03 +02:00
Rouven Seifert 6500dd04b6
wiki: add redirects 2023-08-22 16:29:09 +02:00
Rouven Seifert d188722565
Merge pull request #55 from fsr/padlist
Add pad lister tool
2023-08-22 15:43:29 +02:00
Rouven Seifert 5c1af65721
padlist: configure ldap authentication 2023-08-22 15:37:42 +02:00
Rouven Seifert a555a005e1
ldap: simplify homedir creation 2023-08-22 15:25:33 +02:00
Rouven Seifert 6887bae0a3
padlister: init 2023-08-22 14:55:56 +02:00
Rouven Seifert 72bac64809
ftp: formatting -_- 2023-08-22 14:35:26 +02:00
Rouven Seifert 897410f8df
ftp: enable fancy index 2023-08-22 14:32:23 +02:00
Rouven Seifert 7a902d6b8d
ftp: move to ifsr.de 2023-08-22 14:21:24 +02:00
Rouven Seifert ee9d1abb68
courses: start after postgres 2023-08-21 12:10:44 +02:00
Rouven Seifert 8e2f284201
postgres: backup: specify databases 2023-08-21 11:48:03 +02:00
Rouven Seifert cdd10f5372
postgres: enable backups 2023-08-21 11:40:56 +02:00
Rouven Seifert ca5d374f51
stream: move to ifsr.de 2023-08-17 13:50:57 +02:00
Lyn Fugmann fff575342d
wiki: add comments 2023-08-16 15:41:01 +02:00
Rouven Seifert 84a690bd52
wiki: start after postgres 2023-08-16 15:41:00 +02:00
Lyn Fugmann e6948b1fa1
wiki: add VisualEditor plugin 2023-08-16 15:40:59 +02:00
Lyn Fugmann aaab6ef91c
wiki: configure oidc auth 2023-08-16 15:40:43 +02:00
Lyn Fugmann 11be7f44c1
Patch Portunus to allow using both insecure ldap and ldaps at once 2023-08-16 15:39:52 +02:00
Lyn Fugmann c992331bbd
Fix wiki setup and database connection 2023-08-16 15:39:39 +02:00
quitte 5bc34bdbdb fixed ifsrde index 2023-08-16 15:11:27 +02:00
Rouven Seifert 38c947fe01
remove the vm 2023-08-16 14:51:01 +02:00
quitte 606c7185e0 on-metal updates
- grav fixes
- course management migration
2023-08-16 14:21:56 +02:00
Rouven Seifert 89404e80d3
include uptsream nginx config for grav 2023-08-16 13:57:10 +02:00
Rouven Seifert aaf49311fc
ssl for the website 2023-08-16 13:28:43 +02:00
Rouven Seifert f8684b8be9
initial website configuration 2023-08-16 13:24:56 +02:00
Rouven Seifert 8e85ef6281
secret rotation
- removed all non-admin keys from ssh and sops
- rotated sops keys
- regenerated secrets
2023-08-14 11:31:18 +02:00
Rouven Seifert f1924af906
vaultwarden: don't use staging domain 2023-08-09 15:36:53 +02:00
Rouven Seifert 88ae35d945
add activation script showing updated packages 2023-07-29 17:09:01 +02:00
Rouven Seifert f3aa48f7b4
update bacula mail subject 2023-07-25 11:27:25 +02:00
Rouven Seifert aa65070aa0
fix escaping in bacula mailcommand 2023-07-22 13:24:48 +02:00
Rouven Seifert 0e29e3c27a
configure mails for bacula 2023-07-21 12:30:55 +02:00
Rouven Seifert 03497aebc9
pin bacula to 9.6.7 2023-07-20 23:38:03 +02:00
Rouven Seifert 95fb2ae683
fix hedgedoc database config 2023-07-20 13:00:30 +02:00
Rouven Seifert 7839693bad
Merge pull request #52 from fsr/db-passwords
remove postgresql passwords where they are not needed
2023-07-20 12:48:05 +02:00
Rouven Seifert 10101a9e18
write own bacula config file since the upstream one is broken 2023-07-20 10:14:12 +02:00
Rouven Seifert 8ef5af5305
fix sogo replacements 2023-07-19 17:49:32 +02:00
Rouven Seifert defc2f2324
remove postgresql passwords where they are unneeded 2023-07-19 17:44:49 +02:00
Rouven Seifert 6d28293c86
Merge pull request #42 from fsr/gitea
Add gitea module
2023-07-19 16:19:47 +02:00
Rouven Seifert 9b19e080b0
open firewall for bacula 2023-07-19 16:02:41 +02:00
root 8b30a10c0f bacula fixes 2023-07-19 15:56:07 +02:00
Rouven Seifert 3fef58e888
configure bacula 2023-07-19 15:46:49 +02:00
Lyn Fugmann a2360c9f56
Add gitea module 2023-07-19 15:46:37 +02:00
Rouven Seifert 32b74fefd1
add sane zsh config 2023-07-19 15:01:47 +02:00
Lyn Fugmann da7cbfb98c
nixify portunus seeds 2023-07-19 14:32:06 +02:00
Lyn Fugmann e8263b93dc
Refactor ldap and enable dex
Co-authored-by: revol-xut <revol-xut@protonmail.com>
2023-07-19 14:31:47 +02:00
Rouven Seifert 80d016ae8f
enable mail quotas
Currently set to 10 gigabytes. Nobody I know ever reached that limit, so it should be fine
2023-07-14 15:47:11 +02:00
Rouven Seifert d7e85c3d43
Merge branch 'main' into vaultwarden 2023-07-12 15:54:36 +02:00
Rouven Seifert c0266785cd
Merge branch 'main' into vaultwarden 2023-07-12 15:51:25 +02:00
Rouven Seifert e7adae7b45
add mail settings 2023-07-12 15:46:25 +02:00
Lyn Fugmann 8d84f387f5
Add course-management module 2023-07-12 00:33:53 +02:00
Tassilo Tanneberger 69cf4211a4
Merge pull request #43 from fsr/userdir
Serve public_html directory
2023-07-08 18:47:37 +02:00
Rouven Seifert 2afef761ed
Merge branch 'main' into garbage 2023-07-07 12:16:30 +02:00
Rouven Seifert 1b3ea40f9e
Merge branch 'main' into kpp 2023-07-07 12:10:53 +02:00
Rouven Seifert 105b2a0476
mail: include aliases in local recipient maps 2023-07-07 11:03:57 +02:00
Rouven Seifert 6c542cadb9
fix sending to aliases 2023-07-07 10:14:02 +02:00
Lyn Fugmann 9be95bc7d7
Fix IPv6 mail sending, add noreply alias 2023-07-06 01:10:47 +02:00
Rouven Seifert 0165a0ad2d
removed some unneeded files 2023-07-05 17:15:24 +02:00
Rouven Seifert 1d9359416d
add postmaster alias 2023-07-05 16:21:20 +02:00
Rouven Seifert d5e881c639
use portunus.package to override 2023-07-04 17:06:18 +02:00
Rouven Seifert d94a77d35c
configure kpp 2023-07-04 16:03:10 +02:00
Rouven Seifert 5136effd16
fix the portunus pach 2023-07-04 15:15:58 +02:00
Rouven Seifert 0d7a9738b0
manually patch the portunus regex 2023-07-04 15:10:00 +02:00
Rouven Seifert 8b3e42dbb6
disable mail forwarding 2023-07-04 14:54:59 +02:00
Rouven Seifert 18922904df
vaultwarden: init module 2023-07-04 14:20:55 +02:00
Rouven Seifert 2d431ff526
added sieve 2023-07-04 14:00:06 +02:00
Rouven Seifert 7354c31da8
fixed sogo 2023-07-04 12:45:51 +02:00
Rouven Seifert 566ba5082c
Merge remote-tracking branch 'origin/main' into mailman 2023-07-04 09:41:51 +02:00
Rouven Seifert 13020f8ce3
fix ldap group search 2023-07-04 09:36:08 +02:00
Rouven Seifert 15319c9b2b
various fixes
- fix mailman's confirmation emails not sending
- introduce a stateful /etc/aliases
- configure ldap for postfix
2023-07-03 18:23:36 +02:00
Lyn Fugmann 34de78bee0
Serve public_html directory 2023-06-30 15:42:46 +02:00
Lyn Fugmann eba88a8833
add mautrix-telegram 2023-06-22 20:18:28 +02:00
Rouven Seifert 3ddab16dae
use uid as lpad in 2023-06-13 20:17:20 +02:00
Rouven Seifert 0dd03b0965
enable acme for the ifsr base domain 2023-06-13 19:55:07 +02:00
Rouven Seifert 666e6b4425
enable submission on port 587 2023-06-13 19:55:06 +02:00
Rouven Seifert a9b8875563
reload mail services upon acme renew 2023-06-13 19:55:05 +02:00
Rouven Seifert a44c2e04e2
update mailman ssh settings and add root alias 2023-06-13 19:55:01 +02:00
Rouven Seifert 7331eef574
switch to the 23.05 release 2023-05-25 22:58:14 +02:00
Rouven Seifert 504c89d4e9
revert portunus patch to test other stuff 2023-05-12 15:08:11 +02:00
revol-xut 09330c5204 adding overlay for portunus 2023-04-26 15:42:26 +02:00
Rouven Seifert 1f1229e182
enable https for mailman 2023-04-24 22:30:04 +02:00
Rouven Seifert 5f761825f0
Merge pull request #30 from fsr/mailman
Mailman config
2023-04-24 21:12:15 +02:00
revol-xut 8e1543bb14
nixpkgs fmt 2023-04-23 19:43:53 +02:00
revol-xut 25b6d71896
fixing the secrets 2023-04-13 19:35:10 +02:00
revol-xut de62b47e52
merging with main 2023-04-13 18:56:15 +02:00
revol-xut 9cda0097fc
fixing database string 2023-04-13 18:52:15 +02:00
revol-xut a8824ce574
trying to make sogo a little bit more secure 2023-04-13 18:38:37 +02:00
Rouven Seifert 12f1d690ba
added ldap config to mailman 2023-04-04 14:25:21 +02:00
Rouven Seifert d1fb1b3de1
initial mailman config 2023-04-04 00:04:04 +02:00
Tassilo Tanneberger b9c58f5363
Merge pull request #22 from fsr/mail
[Draft] Fixes for the mail configuration
2023-04-03 23:19:32 +02:00
revol-xut 78dbad50f8 Merge branch 'sogo-test' 2023-04-03 23:14:28 +02:00
revol-xut c813f3ac83
fixing secrets for sogo 2023-04-03 23:14:12 +02:00
Tassilo Tanneberger 7dffd30187
Merge pull request #29 from fsr/sogo-test
Sogo Module implementation
2023-04-03 23:05:28 +02:00
revol-xut e37482ef0a
nixpkgs fmt 2023-04-03 23:05:00 +02:00
Rouven Seifert 7c947ab23a
fix the domain name 2023-03-26 15:12:54 +02:00
Rouven Seifert 250ee8b01b
formatting 2023-03-24 17:06:40 +01:00
Rouven Seifert 214c0d525d
basic ftp config 2023-03-24 17:05:30 +01:00
Rouven Seifert 1a16265222
added important aliases 2023-03-24 16:24:18 +01:00
Rouven Seifert 36dbc82c75
fix homedir mailboxes 2023-03-24 15:51:57 +01:00
Rouven Seifert e63e4d760c
use homedir mailboxes 2023-03-24 15:21:04 +01:00
Rouven Seifert 8f0f55a5ee
missing lib fix 2023-03-24 15:21:03 +01:00
Rouven Seifert dd6374d371
postfix security enhancements 2023-03-24 15:21:02 +01:00
Rouven Seifert 041628def7
fixed dkim 2023-03-24 15:21:01 +01:00
Rouven Seifert eee6282d69
mail: better ldap query and port fixes 2023-03-24 15:20:56 +01:00
tenksom 6ab7985a6a Fixed wrong port 2023-03-22 12:09:21 +01:00
tenksom c83ea08ee8 added timezone and vhostname 2023-03-22 11:24:14 +01:00
Rouven Seifert 0ed90c8122
fixed homedir creation for sshd 2023-03-10 16:38:57 +01:00
Rouven Seifert adf2320e4a
create a home dir upon login 2023-03-10 16:15:53 +01:00
Rouven Seifert 8a2f5c7061
removed garbage 2023-03-10 15:47:56 +01:00
tenksom 6e36183995
Adding new lines for postgresql 2023-03-07 17:59:22 +01:00
tenksom 4f5137c6b9
Adding ldap, nginx, postgresql config in SOGo 2023-03-07 13:06:24 +01:00
tenksom a3f4e289e1
The born of sogo 2023-03-01 18:44:56 +01:00
Rouven Seifert c06161a62a
anonymize ip adresses in nginx logs 2023-03-01 16:40:45 +01:00
Lyn Fugmann e9674b5b0e
configure ldap for hedgedoc (config adapted from kaki) 2023-02-27 11:08:21 +01:00
Rouven Seifert 0d08565be8
revert maildir to /var/mail 2023-02-17 13:54:14 +01:00
Rouven Seifert 9dc63921b8
fix hedgedoc 2023-02-15 15:53:15 +01:00
Rouven Seifert 97dc538040
fixed matrix ldap integration 2023-02-15 15:33:27 +01:00
Rouven Seifert 4945efdea7
fixed dovecot ldap queries 2023-02-15 15:14:57 +01:00
Rouven Seifert 593c324210
catting out the password doesn't work 2023-02-15 14:47:14 +01:00
Rouven Seifert f04eb43459
fixed dovecot ldap 2023-02-15 14:40:37 +01:00
revol-xut 82f47b66cb
formatting 2023-02-15 13:20:23 +01:00
Rouven Seifert bb23a7f67a
fixing the ldap user and temp disabling tls 2023-02-15 11:29:47 +01:00
Rouven Seifert f1b22088c2
format fix 2023-02-03 16:09:41 +01:00
Rouven Seifert 58449429b9
changed maildir to /var/lib/mail, rspamd fixes 2023-02-03 16:04:45 +01:00
Rouven Seifert b600c70202
formatting 2023-02-03 15:50:36 +01:00
Rouven Seifert e893690e1d
use search user for ldap 2023-02-03 15:47:17 +01:00
Rouven Seifert 4e687b1484
some ldap config 2023-02-03 15:47:16 +01:00
Rouven Seifert b74d72f722
configured dkim signing 2023-02-03 15:47:15 +01:00
Rouven Seifert 2411a9c185
finished rspamd setup 2023-02-03 15:47:14 +01:00
Rouven Seifert a11a3614a9
configured tls and rspamd 2023-02-03 15:47:10 +01:00
Rouven Seifert e569bdec50
formatting 2023-02-03 15:44:31 +01:00
Rouven Seifert 2a0e2c6623
add mail filters 2023-02-03 15:44:29 +01:00
Rouven Seifert 14ad30e65d
beautified the file and added opendkim 2023-02-03 15:44:28 +01:00
Rouven Seifert ffae1bc8c5
receiving emails works now 2023-02-03 15:44:27 +01:00
Rouven Seifert 1f70d58853
Initial Email config
Bare-minimum config consisting of postfix and dovecot2.
For testing, passwd is used as userdb. Definitely NOT Production ready!
2023-02-03 15:44:26 +01:00
revol-xut c41369e2ac
enabeling ldap auth 2023-02-03 15:40:42 +01:00
Lyn Fugmann eeac519650
move matrix-synapse-ldap3.nix to /pkgs 2023-02-02 21:16:55 +01:00
Lyn Fugmann fab0899e7e
package ldap3 plugin 2023-01-21 21:26:24 +01:00
Lyn Fugmann c3134e1e58
Synapse LDAP config, add Portunus search user, update flake 2023-01-18 14:12:03 +01:00
Lyn Fugmann 4813ec4811
Merge branch 'main' into matrix 2022-12-17 21:39:37 +01:00
Lyn Fugmann ce7db4dac5
format, use domain option 2022-12-17 21:23:46 +01:00
halcyon 924ac7ee31
fix: set portunus port to 8081 2022-12-17 21:03:54 +01:00
Lyn Fugmann 509cfd4121
Merge branch 'main' into matrix 2022-12-17 21:02:56 +01:00
halcyon fc873af4b3
fix: remove open port 636, potential security risk 2022-12-17 19:45:53 +01:00
halcyon cd1647e5d6
fix: remove unneeded /dex reverse proxy 2022-12-17 19:45:06 +01:00
halcyon c91bcb11f8
fix: seedPath string -> path 2022-12-17 19:44:16 +01:00
halcyon 86295b5501
use config.fsr.domain 2022-12-17 19:21:16 +01:00
halcyon 3d8b8089d6
merge main into ldap 2022-12-17 19:17:52 +01:00
revol-xut 141bdb9737
adding option for domain 2022-12-17 19:12:41 +01:00
Lyn Fugmann 565bcae081
add matrix configuration 2022-12-17 19:11:37 +01:00