aboutsummaryrefslogtreecommitdiff
path: root/secrets (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Delete all old code and configuration to start from scratch with Guix onlyEuAndreh2022-03-077-0/+0
| | | | | | | | | | Delete files related to: - Terraform - opt/* - scripts/deploy - secrets/* - git-crypt - Nix
* opt/secrets/: AddEuAndreh2021-07-291-0/+0
|
* Remove terraform stateEuAndreh2021-03-072-0/+0
|
* Add WIP servers/nixvps/EuAndreh2021-02-251-0/+0
|
* Delete Vultr vps resourcesEuAndreh2021-02-232-0/+0
|
* mv secrets/mail/ -> secrets/vps/mail/EuAndreh2021-02-212-0/+0
|
* Update tfstate fileEuAndreh2021-01-162-0/+0
|
* Remove old secrets/base-image-old-password.txtEuAndreh2021-01-161-0/+0
|
* Checkpoint: Working vps.tf declaration after Vultr migrationEuAndreh2021-01-152-0/+0
|
* Remove secrets/terraform/tfstate-backups/EuAndreh2021-01-152-0/+0
|
* Remove secrets/terraform/plan-files/ and terraform-apply.shEuAndreh2021-01-1581-0/+0
|
* vps.tf: Add CNAME "*" subdomain aliasEuAndreh2020-11-283-0/+0
|
* Terraform: Add email DNS records (DKIM, DMARC, SPF)EuAndreh2020-11-2617-0/+0
|
* Remove default.nix and shell.nixEuAndreh2020-11-183-0/+0
|
* Remove most Nix filesEuAndreh2020-11-1810-0/+0
|
* Add base Guix configuration and start switching to itEuAndreh2020-11-165-0/+0
| | | | | | | | | | | | | | | | - remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.
* Forget existing resource to start working on new VPSEuAndreh2020-11-161-0/+0
|
* Update terraform generated filesEuAndreh2020-11-025-0/+0
|
* Use SQLite instead of PostgreSQL: simplify operations and backupEuAndreh2020-09-231-0/+0
|
* Remove mautrix filesEuAndreh2020-09-221-0/+0
| | | | | Instead create a module from the mautrix-whatsapp and start using mautrix-telegram module from nixpkgs.
* Initial setup for Telegram in Matrix, but it is still not workingEuAndreh2020-09-192-0/+0
|
* Refactor vps-configuration.nix: Split secrets from config and envsubst varsEuAndreh2020-09-0619-2/+0
| | | | Also rename thingTLD to thingDomain.
* Use dynamic toggle for prosodyEuAndreh2020-09-061-0/+0
|
* Add mediator documentationEuAndreh2020-09-021-0/+0
|
* Add cement documentationEuAndreh2020-09-021-0/+0
|
* Build new VPS server from snapshot using bigger machineEuAndreh2020-08-294-0/+0
| | | | | | | I'm using the snapshot here because I don't have any backup system yet, ¯\_(ツ)_/¯ This should be reverted on vps.tf after applying, and I should get down to doing automatic backups.
* Add ci-logs from static filesEuAndreh2020-08-281-0/+0
|
* Enable automatic backup for VPS serverEuAndreh2020-08-253-0/+0
|
* Add pires-prod deploymentEuAndreh2020-08-251-0/+0
|
* Add subdomain for pires documentationEuAndreh2020-08-241-0/+0
|
* Remove matterbridge codeEuAndreh2020-08-241-0/+0
|
* WIP Fix Converse.js setupEuAndreh2020-08-231-0/+0
|
* Chage DNS record of prosodyEuAndreh2020-08-237-0/+0
| | | | | | Terraform file changes were du to me initially trying to do this via creating a SRV DNS record. However this is not required, because Prosody is already on the $TLD sever, the only difference being that it is listening on a different port.
* Update prosody userEuAndreh2020-08-231-0/+0
|
* Use fold to mkdir and chmod all data foldersEuAndreh2020-08-231-0/+0
|
* Fix DATA_ROOT permissionsEuAndreh2020-08-221-0/+0
|
* Remove old matterbridge configurationEuAndreh2020-08-221-0/+0
|
* Add songbooks documentation DNS addressEuAndreh2020-08-226-0/+0
|
* WIP: reenable prosody and matterbridge, and add PDFsEuAndreh2020-08-227-0/+0
|
* Add songbooks documentatationEuAndreh2020-08-201-0/+0
|
* Checkpoint: Shut down Prosody and matterbridgeEuAndreh2020-08-191-0/+0
| | | | Full reasoning under "Decisions" section inside TODOs.org.
* Checkpoint: working matterbridge serverEuAndreh2020-08-181-0/+0
| | | | | | | | | | | | | | | | I was able to make matterbridge work, but only to realize that it doesn't support private groups on most services. So I can't use this as a replacement for other chat systems as I desired. I ended up using my conversations.im account due to the lack of MUC support in my current server. I was also able to setup the Converse client, but my Prosody server also doesn't have HTTP (or WebSockets, I don't remember) yet, so it didn't work for my server. So this may serve as a useful future reference, but I pan to turn off the matterbridge server itself.
* Checkpoint: Working Prosody serverEuAndreh2020-08-161-0/+0
| | | | Use NGINX to create TLS certificate and then share it with prosody.
* Use NGINX to handle the creation of certificates for prosodyEuAndreh2020-08-167-0/+0
| | | | | | | | | | | | | | | | | | After a terraform state rm '...' of the server and domain configuration, and recreating the instance again while leaving the dettached one running. I had to do this because I was experimenting too much with the domain and I hit the Let's Encrypt rate limit[0]. Because of that I'll recreate certificates less often so that doesn't happen in the new domain during development of the VPS. I'm not shure if this solution works, but I'll commit just as a checkpoint. I had to change the custom DNS nameservers from Digital Ocean to Vultr and that may take a while, so it's worth having this as a checkpoint in time while I'm off to other things. [0]: https://letsencrypt.org/docs/rate-limits/
* Deploy "boneco" project at boneco.$TLDEuAndreh2020-08-151-0/+0
|
* Use new image with ownership of /etc/nixos/configuration.nix by userEuAndreh2020-08-155-0/+1
| | | | | Useful reference: - https://discourse.nixos.org/t/can-i-move-etc-nixos-to-my-dotfiles-and-symlink-it-back-to-etc-nixos/4833/10
* Add generated Terraform filesEuAndreh2020-08-144-0/+0
|
* Add updated terraform filesEuAndreh2020-08-142-0/+0
|
* Export borg key under secrets/EuAndreh2020-08-142-0/+0
|
* Stop hardcoding the user in favor of $USER_NAMEEuAndreh2020-08-141-0/+0
|
generated by cgit v1.2.3 (git 2.49.0) at 2025-07-13 19:16:51 +0000