Commit graph

99 commits

Author SHA1 Message Date
3ece72db70 Rename config option after update beyond version 0.11.2 2025-03-06 08:50:36 +01:00
68a02c75e1 Disable matheball.de forwards and submission to mail allowlist until we actually handle it 2025-03-06 08:50:36 +01:00
beaab16ffa Allow unpacking stalwart's webadmin interface 2025-03-06 08:50:36 +01:00
01951eadad Delete directive proxy_interface
This directive is supposed to prevent mail delivery loops that would be caused by portforwarding to itself.
Behind this ip address, however, there is our general mail vm and not immediately the mailinglist setup.
2025-03-06 08:50:36 +01:00
064aca1705
renamed secret files so they are easier to shell glob 2025-03-05 21:11:38 +01:00
e5e3fab14d
reencrypted secrets for Daniel 2025-03-05 20:53:01 +01:00
d21fd3e00c
deleted wrong nyarlathotep key 2025-03-05 20:52:11 +01:00
Daniel Simon
b5bbc0345d Add SOPS/AGE key for daniel 2025-03-04 00:12:27 +01:00
Daniel Simon
638b62591d Add SSH and Nix keys and password for daniel 2025-03-03 23:59:28 +01:00
0472063a76
new ssh key for nerf 2025-03-03 15:21:58 +01:00
753b34592c Increase root file system to make space for /tmp folder which needs lots of space during builds 2025-02-27 16:00:24 +00:00
cc91339f80 Address second round of review 2025-02-27 16:55:14 +01:00
361eed84af Rename machine to Nyarlathotep 2025-02-26 18:04:27 +01:00
70b3a694c4 Submit mailing list mails to correct vm based on port forwarding and run allowlist job less often 2025-02-26 12:34:44 +01:00
f0e584e239 Add patch to allow alias files to redirect to their sender 2025-02-26 12:34:44 +01:00
5a80d86bd3 Post mailaddresses to HRZ allowlist 2025-02-26 12:34:44 +01:00
7796b7aa00 Add mail forwarding based on alias files 2025-02-26 12:34:44 +01:00
d7b8f935cd Add basic mailserver configuration 2025-02-26 12:34:44 +01:00
2aa93c98f5 Add basic machine config for kaalut, a new mail vm 2025-02-26 12:34:44 +01:00
882a8ea189 Add our own package to inputs that converts an alias file to a sieve script.
Remove the simple nixos mailserver dependency thet we won't use.
2025-02-26 12:34:39 +01:00
77bdd979b0 Align file system layout to new naming policy 2025-02-20 16:37:46 +01:00
35707122fa Add Nodens, a VM to install NixOS VMs 2025-02-20 16:37:32 +01:00
51c83c8ec0 Pass pkgs to machine configs to enable installation of packages there 2025-02-20 16:31:55 +01:00
ac85711356 Entferne Backupconfig für die Matheballwebseite
Die Bilder, die gesichert wurden, liegen jetzt alle im Git-Repo der Webseite
2024-10-16 16:32:06 +00:00
ec46a28278
nix config to save some space 2024-10-15 13:19:23 +02:00
e7154785dd Disable TLS behind proxies and relays 2024-10-12 14:10:01 +00:00
ace96d5f7c Restrict HRZ allowlist update service privileges 2024-10-12 14:10:01 +00:00
b50d7d0e6a Mailman backups 2024-10-12 14:10:01 +00:00
b9b7a1fa58 Add pushing to hrz allowlist 2024-10-12 14:10:01 +00:00
1ab6e5d868 Setze Mailman-Maschine auf 2024-10-12 14:10:01 +00:00
0550754cdd nix flake update
Allows insecure package jitsi-meet (see https://github.com/NixOS/nixpkgs/pull/334638)
2024-10-12 13:30:00 +02:00
575343c844 Unify hook settings and fix warning
trace: warning: The option `settings.statix' defined in `/nix/store/plj05iykqma26y930qjf75zxp2qx02sl-source/flake.nix, via option perSystem' has been renamed to `hooks.statix.settings'.
2024-07-02 16:03:14 +02:00
e5a9653f39 nix flake update
In particular contains https://github.com/NixOS/nixpkgs/pull/323753 (This time for real)
2024-07-02 15:52:10 +02:00
367cbeed0a nix flake update
Especially contains https://github.com/NixOS/nixpkgs/pull/323753
2024-07-01 21:32:35 +02:00
495c580653 nix flake update 2024-06-24 09:50:31 +02:00
c739e6f48b nix flake update 2024-06-12 09:13:19 +02:00
d1483131b8 Tausche Gonnes SSH-Key 2024-04-26 18:10:24 +02:00
47fd90c602 nix flake update 2024-04-26 18:09:29 +02:00
e69c8c6efb Remove obsolete DNS resolver 2024-04-03 15:38:50 +02:00
7bc8261cb6 Also sync deletion of files from fsaccount before taking the backup 2024-04-03 15:38:50 +02:00
e91f417a29 Move secrets to machine config 2024-04-03 15:38:50 +02:00
cabd210aa6
[#33] Refactored existing network config 2024-04-02 16:01:57 +02:00
326cc52c2e Feedback: more comments 2024-03-30 19:52:11 +01:00
1bf59168fb Use sops for private key distribution 2024-03-30 09:01:16 +01:00
e340a7eb75 Address Feedback 2024-03-30 09:01:16 +01:00
b0af48a9d0 Backup des Fachschaftsaccounts 2024-03-30 09:01:16 +01:00
b7b0e07f44 Create backuphost Bragi 2024-03-30 09:01:16 +01:00
1c827b5ed1 nix flake update 2024-03-30 07:35:22 +01:00
38a2c46575 Fix YAML-Format and add Gonne's keys 2024-03-21 16:58:58 +01:00
b8f993d71c nix flake update 2024-02-08 05:59:30 +00:00