Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | krebs.backup: use dedicated .backup-filter | tv | 2022-01-05 | 1 | -2/+4 |
| | |||||
* | tv bu: init | tv | 2022-01-05 | 1 | -0/+26 |
| | |||||
* | exim: set User= but run as root | tv | 2022-01-04 | 1 | -2/+3 |
| | | | | | | | | | LoadCredential= will set the owner of $CREDENTIALS_DIRECTORY and the credentials to User=. As currently Exim is currently has to be run as root in order to use the standard SMTP port and for local deliveries[1], set User=exim, but run all processes as root. [1]: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-security_considerations.html#SECID270 | ||||
* | htgen: use currect group names | tv | 2022-01-03 | 1 | -1/+6 |
| | |||||
* | Merge remote-tracking branch 'lass/master' | makefu | 2022-01-03 | 7 | -28/+78 |
|\ | |||||
| * | krebs.tinc: make /etc/tinc/ writable by tincd | lassulus | 2022-01-02 | 1 | -8/+7 |
| | | |||||
| * | Merge remote-tracking branch 'mic92/master' | lassulus | 2022-01-02 | 1 | -1/+5 |
| |\ | |||||
| | * | mic92: drop ipv4 for bernie | Jörg Thalheim | 2022-01-02 | 1 | -1/+0 |
| | | | |||||
| | * | mic92: add ip address for yasmin | Jörg Thalheim | 2022-01-02 | 1 | -0/+5 |
| | | | |||||
| * | | Merge remote-tracking branch 'ni/master' | lassulus | 2022-01-02 | 1 | -11/+11 |
| |\ \ | |||||
| | * | | krebs.systemd: don't offer to reload services | tv | 2021-12-29 | 1 | -11/+11 |
| | | | | | | | | | | | | | | | | | | | | Because new credentials won't be available after reloading, only after restarting. | ||||
| * | | | Merge remote-tracking branch 'gum/master' | lassulus | 2022-01-02 | 19 | -1/+30 |
| |\ \ \ | | |_|/ | |/| | | |||||
| * | | | mic92: add tts.r | Jörg Thalheim | 2021-12-31 | 1 | -1/+1 |
| | | | | |||||
| * | | | Merge remote-tracking branch 'kmein/master' | lassulus | 2021-12-30 | 1 | -1/+2 |
| |\ \ \ | |||||
| | * | | | external: update kmein ssh keys | Kierán Meinhardt | 2021-12-30 | 1 | -1/+2 |
| | | | | | |||||
| * | | | | Merge remote-tracking branch 'ni/master' | lassulus | 2021-12-29 | 1 | -6/+6 |
| |\ \ \ \ | | |/ / / | |/| | / | | | |/ | | |/| | |||||
| | * | | ergo: fix multiclient default config | tv | 2021-12-29 | 1 | -6/+6 |
| | | | | |||||
| * | | | external: pinpox-ahorn.r -> ahorn.r | lassulus | 2021-12-29 | 1 | -2/+2 |
| |/ / | |||||
| * | | ergo: reload, accounts, channels, doc | lassulus | 2021-12-29 | 1 | -4/+49 |
| | | | |||||
| * | | Merge remote-tracking branch 'ni/master' | lassulus | 2021-12-29 | 1 | -30/+8 |
| |\ \ | |||||
| * | | | hotdog.r tinc: add ed25519 pubkey | lassulus | 2021-12-28 | 1 | -0/+1 |
| | | | | |||||
* | | | | k 3 ma: removing trace output for ed25519 keys | makefu | 2022-01-03 | 1 | -1/+1 |
| |_|/ |/| | | |||||
* | | | Merge remote-tracking branch 'tv/master' | makefu | 2021-12-29 | 1 | -29/+10 |
|\ \ \ | | |/ | |/| | |||||
| * | | ergo: kill dead code and stuff | tv | 2021-12-28 | 1 | -30/+8 |
| |/ | |||||
| * | ergo: always merge default config | tv | 2021-12-28 | 1 | -1/+4 |
| | | |||||
* | | k 3 ma: add ed25519 keys for all hosts | makefu | 2021-12-29 | 11 | -0/+18 |
| | | |||||
* | | k 3 ma: make ed25519 keys available for hosts | makefu | 2021-12-28 | 8 | -1/+12 |
|/ | |||||
* | ergo: use DynamicUser | lassulus | 2021-12-28 | 1 | -41/+3 |
| | |||||
* | Merge remote-tracking branch 'mic92/master' | lassulus | 2021-12-28 | 1 | -22/+21 |
|\ | |||||
| * | mic92: fix ssh ed25519 keys | Kierán Meinhardt | 2021-12-28 | 1 | -22/+21 |
| | | |||||
* | | tv hosts: add all the ed25519 keys | tv | 2021-12-28 | 1 | -4/+8 |
|/ | |||||
* | external: fix ed25519 pubkey syntax | lassulus | 2021-12-28 | 1 | -5/+5 |
| | |||||
* | external kmein: fix ed25519 pubkey syntax | lassulus | 2021-12-28 | 1 | -4/+4 |
| | |||||
* | external: add pinpox-ahorn | Pablo Ovelleiro Corral | 2021-12-28 | 1 | -0/+30 |
| | |||||
* | external: add kmein ed25519 keys | Kierán Meinhardt | 2021-12-28 | 1 | -1/+4 |
| | |||||
* | l tinc: define ed25519 keys for all hosts | lassulus | 2021-12-28 | 1 | -267/+321 |
| | |||||
* | Merge remote-tracking branch 'mic92/master' | lassulus | 2021-12-25 | 1 | -1/+0 |
|\ | |||||
| * | matchbox: remove ipv4 | Jörg Thalheim | 2021-12-25 | 1 | -1/+0 |
| | | |||||
* | | exim-smarthost: dkim_strict = true | tv | 2021-12-24 | 1 | -0/+1 |
| | | |||||
* | | exim-smarthost: use LoadCredential | tv | 2021-12-24 | 1 | -27/+7 |
| | | |||||
* | | repo-sync: use LoadCredential | tv | 2021-12-24 | 1 | -16/+10 |
| | | |||||
* | | repo-sync: add group | tv | 2021-12-24 | 1 | -0/+3 |
| | | |||||
* | | krebs.systemd: allow LoadCredential to be a string | tv | 2021-12-24 | 1 | -1/+2 |
|/ | |||||
* | systemd module: use LoadCredentials from config.systemd.services | lassulus | 2021-12-23 | 2 | -48/+28 |
| | |||||
* | Merge remote-tracking branch 'ni/master' | lassulus | 2021-12-23 | 4 | -79/+116 |
|\ | |||||
| * | krebs.systemd: allow reload if credentials change | tv | 2021-12-23 | 1 | -3/+16 |
| | | |||||
| * | krebs.systemd: support credentials of any service | tv | 2021-12-23 | 2 | -21/+27 |
| | | |||||
| * | krebs.tinc: drop environment.systemPackages TODO | tv | 2021-12-23 | 1 | -3/+0 |
| | | | | | | | | | | Nobody bothered about this for more than five years. And even though fixable, chances are quite high that this feature is not needed anymore. | ||||
| * | krebs.tinc: drop api and imp boilerplate | tv | 2021-12-23 | 1 | -10/+4 |
| | | |||||
| * | krebs.tinc: don't bother aliasing packages | tv | 2021-12-23 | 1 | -36/+34 |
| | |