aboutsummaryrefslogtreecommitdiff
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Split SSH public keys into files, and upload it via a make targetEuAndreh2023-03-102-1/+1
|
* src/infrastructure/rsync.net/authorized_keys: Remove keys from old serversEuAndreh2023-03-101-3/+0
|
* src/infrastructure/guix/channels.scm: Do not depend on forked "guix" channelEuAndreh2023-03-101-11/+1
|
* src/infrastructure/ssh.conf: Move to dotfilesEuAndreh2023-03-101-10/+0
|
* system.scm: Fix position of -r REPO argument for backup jobEuAndreh2022-12-091-2/+2
|
* system.scm: Parameterize "etc-shadow" group for dovecot2 configurationEuAndreh2022-12-081-16/+18
|
* system.scm: Do not create /var/empty home directory for system usersEuAndreh2022-12-081-0/+5
|
* src/infrastructure/guix/system.scm: Checkpoint on commited changesEuAndreh2022-12-081-94/+593
| | | | | | | | | | | | | | | | Too many changes that accumulated over time: - shell aliases in /etc/rc; - SSH client configuration in /etc/ssh.conf; - Guile setup script in /etc/init.scm - r(1) command for running thing with the correct environment; - borg -r REPO option, and an extra cronjob for backing up to /mnt/backup/borg; - an extra btrfs disk on /mnt/backup/ - WIP setup of services in containers using (least-authority-wrapper ...); - a couple of FIXME markers for WIP tasks; - azula joins the WireGuard VPN.
* src/doc/: Remove ad-hoc helper filesEuAndreh2022-12-063-137/+0
|
* Revert "system.scm: Decrease permission of Postfix queue dir"EuAndreh2022-11-301-1/+1
| | | | | | This reverts commit a2e771b597c7b1fb6f9e5438002e8250f1fa906c. It breaks Postfix.
* system.scm: Use default config of dkimproxyout-service-typeEuAndreh2022-11-301-3/+1
|
* system.scm: Decrease permission of Postfix queue dirEuAndreh2022-11-301-1/+1
|
* system.scm: Add config for mta-sts subdomainEuAndreh2022-11-301-1/+23
|
* system.scm: Disable WIP Cyrus SASL auth in ProsodyEuAndreh2022-11-301-1/+2
|
* src/infrastructure/guix/channels.scm: Use fork of "guix" channelEuAndreh2022-11-302-2/+12
|
* system.scm: Add "btop" packageEuAndreh2022-11-291-0/+1
|
* src/infrastructure/guix/system.scm: Cleanup doc strings; shuffle things aroundEuAndreh2022-11-291-58/+12
|
* src/infrastructure/guix/system.scm: Remove nanolist-service-typeEuAndreh2022-11-291-1/+0
|
* src/infrastructure/guix/system.scm: Move many services to package-repositoryEuAndreh2022-11-291-505/+0
|
* src/infrastructure/guix/system.scm: Create "git-dir" variable to store ↵EuAndreh2022-11-281-6/+8
| | | | "/srv/git/git"
* src/infrastructure/guix/system.scm: Fix email loop with virtual_alias_databaseEuAndreh2022-11-281-4/+5
|
* src/infrastructure/guix/system.scm: Use alias_database with "static:" is not ↵EuAndreh2022-11-281-3/+4
| | | | working
* src/infrastructure/guix/: Make uniform path for git:// and https:// accessEuAndreh2022-11-282-2/+3
| | | | | | Instead of having repositories served over the Git protocol differ from when they are served via the Dumb HTTP protocol. Previously, nginx was doing the URL rewriting, and
* src/infrastructure/guix/system.scm: Add hostname to cronjob email subjectEuAndreh2022-11-281-1/+1
|
* src/infrastructure/guix/channels.scm: Change org-euandre channelEuAndreh2022-11-281-2/+2
|
* Build TODOs.html on "public" targetEuAndreh2022-11-274-4/+156
|
* src/infrastructure/ssh.conf: Store conn socket in $XDG_STATE_HOMEEuAndreh2022-11-271-1/+1
|
* src/infrastructure/guix/system.scm: Use "inline:" for "alias_database"EuAndreh2022-11-271-2/+3
|
* src/infrastructure/guix/system.scm: Use custom /etc/hosts file: Include ↵EuAndreh2022-11-271-0/+13
| | | | WireGuard addresses
* src/infrastructure/guix/system.scm: Add catchall email addressEuAndreh2022-11-271-0/+2
|
* src/infrastructure/guix/system.scm: Use SIGKILL for Postfix againEuAndreh2022-11-271-1/+1
|
* src/infrastructure/guix/system.scm: WIP setup Prosody auth via SASLEuAndreh2022-11-271-3/+49
|
* src/infrastructure/ssh.conf: Enable persistent SSH connectionsEuAndreh2022-11-271-0/+3
|
* src/infrastructure/: Settle on euandre.org as host-nameEuAndreh2022-11-273-57/+12
|
* src/infrastructure/guix/system.scm: Disable verbose mode of smtpd processesEuAndreh2022-11-271-3/+3
|
* src/infrastructure/guix/system.scm: Add "htop" packageEuAndreh2022-11-261-0/+1
|
* src/infrastructure/guix/system.scm: Add libvirt and virtlog servicesEuAndreh2022-11-261-0/+3
|
* src/infrastructure/guix/system.scm: Add named config-file on dovecot reloadEuAndreh2022-11-261-2/+5
|
* src/infrastructure/guix/system.scm: Remove commented prosody sectionEuAndreh2022-11-251-5/+0
|
* src/infrastructure/guix/system.scm: Enable fail2ban serviceEuAndreh2022-11-251-0/+2
| | | | Use the default configuration while I'm learning to operate the service.
* src/infrastructure/guix/system.scm: Use git-shell as the login for gitEuAndreh2022-11-251-2/+1
|
* src/infrastructure/guix/system.scm: Add cronjobs for borg and reconfigureEuAndreh2022-11-251-0/+7
|
* src/infrastructure/guix/system.scm: Simplify and make with-email workEuAndreh2022-11-251-2/+2
|
* src/infrastructure/guix/system.scm: Move suyin and SSH configuration to root ↵EuAndreh2022-11-251-10/+7
| | | | | | | account Remove auxiliary "borg" group used to give read permission to the passphrase file.
* Setup toph access to suyin for making backupsEuAndreh2022-11-252-5/+9
|
* src/infrastructure/guix/system.scm: Add working version of toph OSEuAndreh2022-11-252-0/+1925
|
* Remove old config files, starting anew for tophEuAndreh2022-11-142-857/+0
|
* src/infrastructure/ssh.conf: Use default port 22EuAndreh2022-11-141-2/+0
|
* src/infrastructure/rsync.net/authorized_keys: Update path to remote repositoriesEuAndreh2022-11-141-3/+3
| | | | | | Friendly diff visible with: $ git show --word-diff $THIS_COMMIT
* src/infrastructure/machines.scm: Remove "Host" entry from sshd.confEuAndreh2022-03-291-4/+0
|