summaryrefslogtreecommitdiffstats
path: root/krebs
Commit message (Collapse)AuthorAgeFilesLines
* external: add kmein ed25519 keysKierán Meinhardt2021-12-281-1/+4
|
* l tinc: define ed25519 keys for all hostslassulus2021-12-281-267/+321
|
* Merge remote-tracking branch 'mic92/master'lassulus2021-12-251-1/+0
|\
| * matchbox: remove ipv4Jörg Thalheim2021-12-251-1/+0
| |
* | exim-smarthost: dkim_strict = truetv2021-12-241-0/+1
| |
* | exim-smarthost: use LoadCredentialtv2021-12-241-27/+7
| |
* | repo-sync: use LoadCredentialtv2021-12-241-16/+10
| |
* | repo-sync: add grouptv2021-12-241-0/+3
| |
* | krebs.systemd: allow LoadCredential to be a stringtv2021-12-241-1/+2
|/
* systemd module: use LoadCredentials from config.systemd.serviceslassulus2021-12-232-48/+28
|
* Merge remote-tracking branch 'ni/master'lassulus2021-12-235-81/+116
|\
| * krebs.systemd: allow reload if credentials changetv2021-12-231-3/+16
| |
| * krebs.systemd: support credentials of any servicetv2021-12-232-21/+27
| |
| * krebs.tinc: drop environment.systemPackages TODOtv2021-12-231-3/+0
| | | | | | | | | | Nobody bothered about this for more than five years. And even though fixable, chances are quite high that this feature is not needed anymore.
| * krebs.tinc: drop api and imp boilerplatetv2021-12-231-10/+4
| |
| * krebs.tinc: don't bother aliasing packagestv2021-12-231-36/+34
| |
| * krebs.tinc: use LoadCredentialtv2021-12-231-50/+27
| |
| * krebs.systemd.services: restart by LoadCredentialtv2021-12-232-0/+52
| |
| * Merge remote-tracking branch 'prism/master'tv2021-12-2226-905/+396
| |\
| * | empty -> emptyDirectorytv2021-12-222-4/+2
| | |
* | | mic92: update ip for eveJörg Thalheim2021-12-231-2/+2
| |/ |/|
* | tinc module: reload instead of restartlassulus2021-12-221-4/+6
| | | | | | | | | | remove enableLegacy option since reloading is dependant on /etc/tinc/<netname> existing
* | Merge remote-tracking branch 'ni/master'lassulus2021-12-211-1/+0
|\|
| * secret service: don't be wanted by multi-user.targettv2021-12-211-1/+0
| | | | | | | | | | | | | | | | | | This fixes an issue causing secret-trigger-*.service to be restarted on every activation because after triggering these services are dead, this in turn causes restarts of secret-*.service. And finally this caused the issue of always restarting tinc services as they are PartOf= a couple of secert-*.service.
* | iptables module: add compat layer to networking.firewalllassulus2021-12-211-2/+36
| |
* | tinc module: use tinc_pre as default packagelassulus2021-12-211-1/+1
| |
* | Merge remote-tracking branch 'ni/master'lassulus2021-12-201-12/+0
|\|
| * github-known-hosts: update listtv2021-12-181-12/+0
| |
* | Merge remote-tracking branch 'mic92/master'lassulus2021-12-201-0/+25
|\ \
| * | mic92: add mickey.rJörg Thalheim2021-12-201-0/+25
| | |
* | | rss-bridge: 2021-04-20 -> 2021-12-02lassulus2021-12-201-3/+3
|/ /
* | Merge remote-tracking branch 'ni/master'lassulus2021-12-151-12/+39
|\|
| * flameshot-once profile: +drawColortv2021-12-141-0/+6
| |
| * flameshot-once profile: don't startup on launchtv2021-12-141-0/+1
| |
| * flameshot-once profile: +showStartupLaunchMessagetv2021-12-141-0/+5
| |
| * flameshot-once profile: +showSidePanelButtontv2021-12-141-0/+5
| |
| * flameshot-once profile: +copyAndCloseAfterUploadtv2021-12-141-0/+5
| |
| * flameshot-once profile: don't check for updatestv2021-12-141-0/+1
| |
| * flameshot-once profile: use toINItv2021-12-141-12/+16
| |
* | nixpkgs-unstable: bc5d683 -> b0bf5f8lassulus2021-12-141-4/+4
| |
* | nixpkgs: -> 5730959lassulus2021-12-141-4/+4
| |
* | ci: add gcroots for successful buildslassulus2021-12-111-2/+15
| |
* | wiki: listen gollum on localhost onlylassulus2021-12-101-2/+2
| |
* | wiki.r: listen on localhost, fix http redirectlassulus2021-12-101-6/+8
| |
* | rotate krebsAcmeCA.crtlassulus2021-12-101-11/+11
| |
* | pkgs.generate-krebs-intermediate-ca: set vailidy to 1ylassulus2021-12-101-0/+1
| |
* | brockman: 4.0.1 -> 4.0.2lassulus2021-12-091-2/+2
| |
* | ca.r: serve ca.crt via nginxlassulus2021-12-094-18/+20
| |
* | wiki.r: add acme ssl configlassulus2021-12-092-4/+5
| |
* | remove hardcoded ca-bundlelassulus2021-12-091-7/+0
| |