summaryrefslogtreecommitdiffstats
path: root/krebs/3modules
Commit message (Collapse)AuthorAgeFilesLines
* add ed25519 pubkey to {catalonia,karakalpakstan}.rLennart2022-01-051-0/+2
|
* exim: set User= but run as roottv2022-01-041-2/+3
| | | | | | | | | LoadCredential= will set the owner of $CREDENTIALS_DIRECTORY and the credentials to User=. As currently Exim is currently has to be run as root in order to use the standard SMTP port and for local deliveries[1], set User=exim, but run all processes as root. [1]: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-security_considerations.html#SECID270
* htgen: use currect group namestv2022-01-031-1/+6
|
* Merge remote-tracking branch 'lass/master'makefu2022-01-037-28/+78
|\
| * krebs.tinc: make /etc/tinc/ writable by tincdlassulus2022-01-021-8/+7
| |
| * Merge remote-tracking branch 'mic92/master'lassulus2022-01-021-1/+5
| |\
| | * mic92: drop ipv4 for bernieJörg Thalheim2022-01-021-1/+0
| | |
| | * mic92: add ip address for yasminJörg Thalheim2022-01-021-0/+5
| | |
| * | Merge remote-tracking branch 'ni/master'lassulus2022-01-021-11/+11
| |\ \
| | * | krebs.systemd: don't offer to reload servicestv2021-12-291-11/+11
| | | | | | | | | | | | | | | | | | | | Because new credentials won't be available after reloading, only after restarting.
| * | | Merge remote-tracking branch 'gum/master'lassulus2022-01-0219-1/+30
| |\ \ \ | | |_|/ | |/| |
| * | | mic92: add tts.rJörg Thalheim2021-12-311-1/+1
| | | |
| * | | Merge remote-tracking branch 'kmein/master'lassulus2021-12-301-1/+2
| |\ \ \
| | * | | external: update kmein ssh keysKierán Meinhardt2021-12-301-1/+2
| | | | |
| * | | | Merge remote-tracking branch 'ni/master'lassulus2021-12-291-6/+6
| |\ \ \ \ | | |/ / / | |/| | / | | | |/ | | |/|
| | * | ergo: fix multiclient default configtv2021-12-291-6/+6
| | | |
| * | | external: pinpox-ahorn.r -> ahorn.rlassulus2021-12-291-2/+2
| |/ /
| * | ergo: reload, accounts, channels, doclassulus2021-12-291-4/+49
| | |
| * | Merge remote-tracking branch 'ni/master'lassulus2021-12-291-30/+8
| |\ \
| * | | hotdog.r tinc: add ed25519 pubkeylassulus2021-12-281-0/+1
| | | |
* | | | k 3 ma: removing trace output for ed25519 keysmakefu2022-01-031-1/+1
| |_|/ |/| |
* | | Merge remote-tracking branch 'tv/master'makefu2021-12-291-29/+10
|\ \ \ | | |/ | |/|
| * | ergo: kill dead code and stufftv2021-12-281-30/+8
| |/
| * ergo: always merge default configtv2021-12-281-1/+4
| |
* | k 3 ma: add ed25519 keys for all hostsmakefu2021-12-2911-0/+18
| |
* | k 3 ma: make ed25519 keys available for hostsmakefu2021-12-288-1/+12
|/
* ergo: use DynamicUserlassulus2021-12-281-41/+3
|
* Merge remote-tracking branch 'mic92/master'lassulus2021-12-281-22/+21
|\
| * mic92: fix ssh ed25519 keysKierán Meinhardt2021-12-281-22/+21
| |
* | tv hosts: add all the ed25519 keystv2021-12-281-4/+8
|/
* external: fix ed25519 pubkey syntaxlassulus2021-12-281-5/+5
|
* external kmein: fix ed25519 pubkey syntaxlassulus2021-12-281-4/+4
|
* external: add pinpox-ahornPablo Ovelleiro Corral2021-12-281-0/+30
|
* external: add kmein ed25519 keysKierán Meinhardt2021-12-281-1/+4
|
* l tinc: define ed25519 keys for all hostslassulus2021-12-281-267/+321
|
* Merge remote-tracking branch 'mic92/master'lassulus2021-12-251-1/+0
|\
| * matchbox: remove ipv4Jörg Thalheim2021-12-251-1/+0
| |
* | exim-smarthost: dkim_strict = truetv2021-12-241-0/+1
| |
* | exim-smarthost: use LoadCredentialtv2021-12-241-27/+7
| |
* | repo-sync: use LoadCredentialtv2021-12-241-16/+10
| |
* | repo-sync: add grouptv2021-12-241-0/+3
| |
* | krebs.systemd: allow LoadCredential to be a stringtv2021-12-241-1/+2
|/
* systemd module: use LoadCredentials from config.systemd.serviceslassulus2021-12-232-48/+28
|
* Merge remote-tracking branch 'ni/master'lassulus2021-12-234-79/+116
|\
| * krebs.systemd: allow reload if credentials changetv2021-12-231-3/+16
| |
| * krebs.systemd: support credentials of any servicetv2021-12-232-21/+27
| |
| * krebs.tinc: drop environment.systemPackages TODOtv2021-12-231-3/+0
| | | | | | | | | | Nobody bothered about this for more than five years. And even though fixable, chances are quite high that this feature is not needed anymore.
| * krebs.tinc: drop api and imp boilerplatetv2021-12-231-10/+4
| |
| * krebs.tinc: don't bother aliasing packagestv2021-12-231-36/+34
| |
| * krebs.tinc: use LoadCredentialtv2021-12-231-50/+27
| |