aboutsummaryrefslogtreecommitdiff
path: root/secrets (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-08-23Chage DNS record of prosodyEuAndreh7-0/+0
Terraform file changes were du to me initially trying to do this via creating a SRV DNS record. However this is not required, because Prosody is already on the $TLD sever, the only difference being that it is listening on a different port.
2020-08-23Update prosody userEuAndreh1-0/+0
2020-08-23Use fold to mkdir and chmod all data foldersEuAndreh1-0/+0
2020-08-22Fix DATA_ROOT permissionsEuAndreh1-0/+0
2020-08-22Remove old matterbridge configurationEuAndreh1-0/+0
2020-08-22Add songbooks documentation DNS addressEuAndreh6-0/+0
2020-08-22WIP: reenable prosody and matterbridge, and add PDFsEuAndreh7-0/+0
2020-08-20Add songbooks documentatationEuAndreh1-0/+0
2020-08-19Checkpoint: Shut down Prosody and matterbridgeEuAndreh1-0/+0
Full reasoning under "Decisions" section inside TODOs.org.
2020-08-18Checkpoint: working matterbridge serverEuAndreh1-0/+0
I was able to make matterbridge work, but only to realize that it doesn't support private groups on most services. So I can't use this as a replacement for other chat systems as I desired. I ended up using my conversations.im account due to the lack of MUC support in my current server. I was also able to setup the Converse client, but my Prosody server also doesn't have HTTP (or WebSockets, I don't remember) yet, so it didn't work for my server. So this may serve as a useful future reference, but I pan to turn off the matterbridge server itself.
2020-08-16Checkpoint: Working Prosody serverEuAndreh1-0/+0
Use NGINX to create TLS certificate and then share it with prosody.
2020-08-16Use NGINX to handle the creation of certificates for prosodyEuAndreh7-0/+0
After a terraform state rm '...' of the server and domain configuration, and recreating the instance again while leaving the dettached one running. I had to do this because I was experimenting too much with the domain and I hit the Let's Encrypt rate limit[0]. Because of that I'll recreate certificates less often so that doesn't happen in the new domain during development of the VPS. I'm not shure if this solution works, but I'll commit just as a checkpoint. I had to change the custom DNS nameservers from Digital Ocean to Vultr and that may take a while, so it's worth having this as a checkpoint in time while I'm off to other things. [0]: https://letsencrypt.org/docs/rate-limits/
2020-08-15Deploy "boneco" project at boneco.$TLDEuAndreh1-0/+0
2020-08-15Use new image with ownership of /etc/nixos/configuration.nix by userEuAndreh5-0/+1
Useful reference: - https://discourse.nixos.org/t/can-i-move-etc-nixos-to-my-dotfiles-and-symlink-it-back-to-etc-nixos/4833/10
2020-08-14Add generated Terraform filesEuAndreh4-0/+0
2020-08-14Add updated terraform filesEuAndreh2-0/+0
2020-08-14Export borg key under secrets/EuAndreh2-0/+0
2020-08-14Stop hardcoding the user in favor of $USER_NAMEEuAndreh1-0/+0
2020-08-14Setup cgit and ProsodyEuAndreh1-0/+0
The TLS setup for Prosody is broken, though.
2020-08-12Add .tfplan extension to Terraform plan filesEuAndreh33-0/+0
2020-08-11vps-configuration.env.nix: Finish working Nextcloud installationEuAndreh6-0/+0
2020-08-11nixos-update.sh: Always set the NixOS channel based on $SYSTEM_STATE_VERSIONEuAndreh1-0/+0
2020-08-10Update Terraform infrastructureEuAndreh3-0/+0
2020-08-10Semi working setup: Terraform and LetsEncrypt workingEuAndreh23-0/+1
2020-08-10Interactive Terraform plan -> apply cycleEuAndreh11-0/+0
2020-08-10nixfmt ./secrets/nix/e1d5f317b0f7a-snapshot-configuration.nixEuAndreh1-0/+0
2020-08-10Use password via stdin, and store the snapshot image configuration.nixEuAndreh2-0/+0
2020-08-10Use new image with new SSH key and andreh userEuAndreh1-0/+0
2020-08-10Remove unused secrets/{borg,ssh}/EuAndreh6-0/+0
2020-08-10Migration: Remove Ansible and Docker code, move only to NixOSEuAndreh7-0/+0
2020-08-10WIP: Move to Vultr and NixOSEuAndreh4-0/+0
2020-08-09secret-envrc.sh: Fix remote borg pathEuAndreh1-0/+0
2020-08-08scripts/ci/setup.sh: Get GPG key from serverEuAndreh1-0/+0
Instead of storing it on the repository.
2020-08-06Remove gpodder.net sync software from the serverEuAndreh1-0/+0
2020-08-05Add gpodder environment variablesEuAndreh1-0/+0
2020-08-05Add gpodder container initial implementationEuAndreh1-0/+0
2020-08-02Toggle DESTROY_VPSEuAndreh1-0/+0
2020-08-02Conform volume_name to digital ocean's limitationEuAndreh1-0/+0
2020-08-02Remove all wallabag references leftEuAndreh1-0/+0
2020-08-02Rename DESTROY_VOLUME -> DESTROY_VPSEuAndreh1-0/+0
2020-08-02Toggle DESTROY_VOLUMEEuAndreh1-0/+0
2020-08-02secret-envry.sh: Add ${DESTROY_VOLUME} operational toggleEuAndreh1-0/+0
2020-08-02Use a name from the environment for the names of the host and the volumeEuAndreh1-0/+0
2020-08-02secret-envrc.sh: Update TLDEuAndreh1-0/+0
2019-06-16Chage $TLD! :tada:EuAndreh1-0/+0
2019-06-15Fancify TLD prefixes for Wallabag and NextcloudEuAndreh1-0/+0
2019-06-13Specify email address when rotating keysEuAndreh1-0/+0
2019-06-10Remove call to =cd= in envrc filesEuAndreh1-0/+0
2019-06-10Output all generated files on ./generated/, refactor .envrc variablesEuAndreh2-0/+0
2019-06-10Re enable $DESTROY_VOLUME toggleEuAndreh1-0/+0