aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* vps.scm: Refactor namespaces and add CI mcron jobsEuAndreh2020-11-291-26/+260
|
* ci-build.sh: Remove server-specific PREFIX path of logfileEuAndreh2020-11-292-4/+6
|
* vps.scm: Inline id_rsa.pub fileEuAndreh2020-11-292-4/+3
|
* Move FIXME markers to TODOs.orgEuAndreh2020-11-292-3/+5
|
* manifest.scm: Add missing packagesEuAndreh2020-11-291-4/+14
|
* Remove .bashrcEuAndreh2020-11-292-34/+4
|
* ci-build.sh: Update path to $LOGFILEEuAndreh2020-11-291-1/+1
|
* Add scripts/ci-build.shEuAndreh2020-11-291-0/+38
|
* vps.scm: WIP setup cgitEuAndreh2020-11-291-25/+83
|
* Move shell.sh to containerEuAndreh2020-11-292-5/+3
|
* Move tests.sh to MakefileEuAndreh2020-11-292-10/+8
|
* TODOs.org: Ressurect decision on public SSH key leakage and add anchorsEuAndreh2020-11-291-1/+32
|
* vps.scm: Add ci.$tld subdomainEuAndreh2020-11-281-1/+1
|
* vps.tf: Add CNAME "*" subdomain aliasEuAndreh2020-11-284-0/+7
|
* vps.scm: Restart NGINX service instead of killing the processEuAndreh2020-11-281-14/+17
|
* tests.sh: Remove call to ./scripts/assert-nixfmt.shEuAndreh2020-11-281-1/+0
|
* TODOs.orgEuAndreh2020-11-271-0/+8
|
* vps.tf: Add IPv6 outputEuAndreh2020-11-271-1/+5
|
* TODOs.org: remove old sectionsEuAndreh2020-11-271-179/+17
|
* vps.scm: Uncomment opensmtpd-service-typeEuAndreh2020-11-261-3/+3
|
* vps.scm: Add some FIXME markersEuAndreh2020-11-261-1/+3
|
* .bashrc: Allow aliases on sudo commandsEuAndreh2020-11-261-0/+2
|
* TODOs.orgEuAndreh2020-11-261-1/+6
|
* vps.scm: Merge (slurp-trim ...) into (slurp ...)EuAndreh2020-11-261-7/+6
|
* vps.scm: Use symbols for declaring packagesEuAndreh2020-11-261-4/+4
|
* vps.scm: Indent (operating-system ...) expressionEuAndreh2020-11-261-61/+61
|
* vps.scm: Add nginx, certbot and mail-aliases servicesEuAndreh2020-11-262-13/+60
|
* vps.scm: Start setting up OpenSMTPD configurationEuAndreh2020-11-261-2/+30
|
* vps.scm: Add missing use for unattended upgradesEuAndreh2020-11-261-1/+1
|
* vps.scm: Put user name in a variableEuAndreh2020-11-261-3/+5
|
* Terraform: Add email DNS records (DKIM, DMARC, SPF)EuAndreh2020-11-2620-1/+76
|
* vps.scm: Add unattended-upgrade-service-type to the service listEuAndreh2020-11-231-0/+1
|
* vps.scm: Add mcron-service-type with empyt list of jobsEuAndreh2020-11-221-2/+5
|
* vps.scm: Add git packageEuAndreh2020-11-221-1/+2
| | | | For using git push commands
* Remove niv's sources under nix/EuAndreh2020-11-182-223/+0
|
* Remove assert-nixfmt.shEuAndreh2020-11-181-16/+0
|
* Remove duplicated Vultr provider versionEuAndreh2020-11-181-1/+0
|
* Remove default.nix and shell.nixEuAndreh2020-11-187-32/+1
|
* Add versions.tfEuAndreh2020-11-181-0/+8
|
* Remove most Nix filesEuAndreh2020-11-1827-303/+98
|
* vps.scm: Change locale to fr_FR.UTF-8EuAndreh2020-11-161-1/+1
|
* .bashrc: Add "l" Bash aliasEuAndreh2020-11-161-0/+1
|
* rsync the full folder to home instead of file by fileEuAndreh2020-11-163-3/+4
|
* Copy over the .bashrc file from the VPSEuAndreh2020-11-161-0/+31
|
* TODOs.org: Sort services by priorityEuAndreh2020-11-161-3/+3
|
* guix-reconfigure.sh: Remove un-needed (for now) envsubst call and shrink ssh ↵EuAndreh2020-11-161-3/+4
| | | | commands
* vps.scm: Remove comment from generated OS configurationEuAndreh2020-11-161-3/+0
|
* vps.scm: Stop inlining content of sudoers fileEuAndreh2020-11-161-3/+5
|
* Add base Guix configuration and start switching to itEuAndreh2020-11-1610-8/+69
| | | | | | | | | | | | | | | | - remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.
* Fix tests.shEuAndreh2020-11-162-32/+1
|