Commit graph

34 commits

Author SHA1 Message Date
5c081e2797 Inherit nextcloud vHost config from module. 2019-09-09 05:19:51 +02:00
29c876ce83 Fix fail2ban issues. 2019-09-09 05:19:19 +02:00
94e969abd9 Code cleanup. 2019-09-06 11:40:22 +02:00
9b6cea1696 UsePrivilegeSeparation is deprecated since openssh 7.5 (option is now enforced by default). 2019-09-06 11:40:22 +02:00
fd14a260c0 Make secret path configurable (mainly for container support).
'/secret/hostName' is still required.
2019-08-28 15:56:19 +02:00
7d70e000ce Add alias to mail accounts.
Automatically add fqdn as mail alias.
2019-08-28 00:33:00 +02:00
a80b06b881 Updated mailserver submodule. 2019-08-27 18:50:18 +02:00
51e986da9c Generate mail accounts from a user list. 2019-08-27 18:05:42 +02:00
61f88e73ef Fixed initial databases if not enabled. 2019-08-27 18:05:42 +02:00
d9ecea0a17 Integrate mailman3 service into my existing configuration. 2019-08-04 04:20:00 +02:00
1c62f3201e Modularized nginx config. 2019-08-04 03:54:58 +02:00
ed892d1fb8 Automatically add administrative users to openssh's AllowUsers list. 2019-06-26 00:33:04 +02:00
2c00cc5b9b Add multitouch. 2019-06-23 01:17:18 +02:00
fa3aaf31a5 Update udev rules to use NixOS's steam-hardware option. 2019-06-22 20:38:52 +02:00
5fb2b1e069 Updated mailserver submodule. 2019-05-09 19:55:59 +02:00
0ddcaf4085 Clean up in accordance with unofficial nix-linter. 2019-05-09 18:28:40 +02:00
dc0c983517 i3 config already set in desktop/i3.nix; updated package sets; fixed faulty udev line. 2019-05-08 19:32:00 +02:00
6c744f089e xserver.nix is now desktop.nix; WM's can now be added/removed through machine options. Added sway and some fonts. 2019-05-04 13:47:21 +02:00
097981466e Replaced 'builtins.readFile' with 'lib.fileContents'. 2019-04-14 18:35:37 +02:00
87e725740e Merge remote-tracking branch 'origin/master' 2019-04-11 23:45:26 +02:00
bd87853b1f Added webblog option to nginx blog vhost. 2019-04-11 23:45:09 +02:00
61e2f5b6ce Manually applied 415b927 from nixpkgs to nginx config. Changed mail vhost back to previous setting (as it otherwise fails when the mailserver service is not enabled). 2019-04-11 22:58:05 +02:00
3ea4cf2954 Changed shell color for Ophanim. Fixed nix-serve. Improved nginx security. 2019-04-03 00:06:08 +02:00
782cd1efae Binary Cache should almost work now. Switched to older Kernel on Lilim. 2019-03-27 13:48:09 +01:00
f6aed0e2a1 Removed nonexistent option fron openssh config. Whitelist localhost in fail2ban. 2019-03-25 01:41:26 +01:00
31aa2297a4 Port options in nginx configuration need to strings. 2019-03-25 00:55:34 +01:00
e745bdea3d More nginx config dehardcoding. Did some sshd hardening. 2019-03-24 22:55:17 +01:00
66ca5839e5 Added domain option. Maybe fixed binary cache signing. 2019-03-23 02:50:48 +01:00
63e40a5a29 Updated nginx config; added missing mkIf; added fail2ban to Ophanim's services list. 2019-03-20 04:37:00 +01:00
14332b2c7b Modularized configuration now kind of works. (still need to do some refactoring) 2019-03-20 02:57:59 +01:00
a0f361425a Started work on modularized machine config, does not quite work yet. Changed Ophanim's kernel to hardened. 2019-03-17 11:43:14 +01:00
2efae4f888 Hydra kind of works now. Switched to nixos nextcloud module. Renamed some stuff and added kdeconnect firewall rules. Added gvfs modules environmen variable. 2019-03-04 10:35:50 +01:00
764f126524 Added mailserver submodule; OpenSSH now logs sftp access. 2019-02-26 14:10:58 +01:00
9003080a64 Fresh repo without sensitive data. 2019-02-26 13:44:40 +01:00