1
0
Fork 0
Commit Graph

91 Commits

Author SHA1 Message Date
Kevin Baensch c33b4517a7 Reworked pkgsets implementation again, still not really what I want yet. 2019-10-24 12:06:04 +02:00
Kevin Baensch 535a8079e6 Remove hardcoded nextcloud admin username. 2019-10-09 15:13:13 +02:00
Kevin Baensch bc22db3e1b Add suppport for multiple Domains. 2019-10-08 14:44:14 +02:00
Kevin Baensch a4fde6972f Get domain url from machine.vHost config (except for cache).
Add turn server option to nextcloud (untested).
2019-10-07 03:23:00 +02:00
Kevin Baensch ce2c259059 Nginx 19.09 Changes. 2019-10-06 18:30:47 +02:00
Kevin Baensch 8606d37717 Lilim is dead. Long live Lilim! 2019-09-30 19:44:00 +02:00
Kevin Baensch dc55eea98a Option name changes. 2019-09-23 23:33:22 +02:00
Kevin Baensch 5c081e2797 Inherit nextcloud vHost config from module. 2019-09-09 05:19:51 +02:00
Kevin Baensch 29c876ce83 Fix fail2ban issues. 2019-09-09 05:19:19 +02:00
Kevin Baensch 94e969abd9 Code cleanup. 2019-09-06 11:40:22 +02:00
Kevin Baensch 9b6cea1696 UsePrivilegeSeparation is deprecated since openssh 7.5 (option is now enforced by default). 2019-09-06 11:40:22 +02:00
Kevin Baensch fd14a260c0 Make secret path configurable (mainly for container support).
'/secret/hostName' is still required.
2019-08-28 15:56:19 +02:00
Kevin Baensch 7d70e000ce Add alias to mail accounts.
Automatically add fqdn as mail alias.
2019-08-28 00:33:00 +02:00
Kevin Baensch a80b06b881 Updated mailserver submodule. 2019-08-27 18:50:18 +02:00
Kevin Baensch 51e986da9c Generate mail accounts from a user list. 2019-08-27 18:05:42 +02:00
Kevin Baensch 61f88e73ef Fixed initial databases if not enabled. 2019-08-27 18:05:42 +02:00
Kevin Baensch d9ecea0a17 Integrate mailman3 service into my existing configuration. 2019-08-04 04:20:00 +02:00
Kevin Baensch 1c62f3201e Modularized nginx config. 2019-08-04 03:54:58 +02:00
Kevin Baensch ed892d1fb8 Automatically add administrative users to openssh's AllowUsers list. 2019-06-26 00:33:04 +02:00
Kevin Baensch 2c00cc5b9b Add multitouch. 2019-06-23 01:17:18 +02:00
Kevin Baensch fa3aaf31a5 Update udev rules to use NixOS's steam-hardware option. 2019-06-22 20:38:52 +02:00
Kevin Baensch 5fb2b1e069 Updated mailserver submodule. 2019-05-09 19:55:59 +02:00
Kevin Baensch 0ddcaf4085 Clean up in accordance with unofficial nix-linter. 2019-05-09 18:28:40 +02:00
Kevin Baensch dc0c983517 i3 config already set in desktop/i3.nix; updated package sets; fixed faulty udev line. 2019-05-08 19:32:00 +02:00
Kevin Baensch 6c744f089e xserver.nix is now desktop.nix; WM's can now be added/removed through machine options. Added sway and some fonts. 2019-05-04 13:47:21 +02:00
Kevin Baensch 097981466e Replaced 'builtins.readFile' with 'lib.fileContents'. 2019-04-14 18:35:37 +02:00
Kevin Baensch 87e725740e Merge remote-tracking branch 'origin/master' 2019-04-11 23:45:26 +02:00
Kevin Baensch bd87853b1f Added webblog option to nginx blog vhost. 2019-04-11 23:45:09 +02:00
Kevin Baensch 61e2f5b6ce Manually applied 415b927 from nixpkgs to nginx config. Changed mail vhost back to previous setting (as it otherwise fails when the mailserver service is not enabled). 2019-04-11 22:58:05 +02:00
Kevin Baensch 3ea4cf2954 Changed shell color for Ophanim. Fixed nix-serve. Improved nginx security. 2019-04-03 00:06:08 +02:00
Kevin Baensch 782cd1efae Binary Cache should almost work now. Switched to older Kernel on Lilim. 2019-03-27 13:48:09 +01:00
Kevin Baensch f6aed0e2a1 Removed nonexistent option fron openssh config. Whitelist localhost in fail2ban. 2019-03-25 01:41:26 +01:00
Kevin Baensch 31aa2297a4 Port options in nginx configuration need to strings. 2019-03-25 00:55:34 +01:00
Kevin Baensch e745bdea3d More nginx config dehardcoding. Did some sshd hardening. 2019-03-24 22:55:17 +01:00
Kevin Baensch 66ca5839e5 Added domain option. Maybe fixed binary cache signing. 2019-03-23 02:50:48 +01:00
Kevin Baensch 63e40a5a29 Updated nginx config; added missing mkIf; added fail2ban to Ophanim's services list. 2019-03-20 04:37:00 +01:00
Kevin Baensch 14332b2c7b Modularized configuration now kind of works. (still need to do some refactoring) 2019-03-20 02:57:59 +01:00
Kevin Baensch a0f361425a Started work on modularized machine config, does not quite work yet. Changed Ophanim's kernel to hardened. 2019-03-17 11:43:14 +01:00
Kevin Baensch 2efae4f888 Hydra kind of works now. Switched to nixos nextcloud module. Renamed some stuff and added kdeconnect firewall rules. Added gvfs modules environmen variable. 2019-03-04 10:35:50 +01:00
Kevin Baensch 764f126524 Added mailserver submodule; OpenSSH now logs sftp access. 2019-02-26 14:10:58 +01:00
Kevin Baensch 9003080a64 Fresh repo without sensitive data. 2019-02-26 13:44:40 +01:00