aboutsummaryrefslogtreecommitdiff
path: root/sync/vps.scm (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-12-02vps.scm: Inform the name of the downloaded fileEuAndreh1-2/+2
2020-11-30vps.scm: Add tick-cmd-reader for #´cmd args1 args2 $variable´EuAndreh1-4/+15
2020-11-30vps.scm: Add #[f % b c] readerEuAndreh1-2/+14
2020-11-30vps.scm: Use #; over ; commentsEuAndreh1-26/+28
2020-11-30vps.scm: s/generate-ci-index-html/generate-logs-html/EuAndreh1-5/+5
2020-11-30vps.scm: Remove (restore-logfiles) and serve them from cgit directlyEuAndreh1-34/+26
2020-11-30TODOs.orgEuAndreh1-2/+2
2020-11-30vps.scm: Uncomment mcron job time markerEuAndreh1-1/+1
2020-11-30vps.scm: Add heredoc reader, '(cmd -> ->>) helpers and refactor code to use themEuAndreh1-81/+58
2020-11-29vps.scm: WIP test wrapping code in '(with-imported-modules ...)'EuAndreh1-2/+9
2020-11-29vps.scm: Always restart mcron on system activationEuAndreh1-0/+6
2020-11-29vps.scm: Stop prefixing (gnu) and (guix) modulesEuAndreh1-15/+15
2020-11-29vps.scm: Refactor namespaces and add CI mcron jobsEuAndreh1-26/+260
2020-11-29vps.scm: Inline id_rsa.pub fileEuAndreh1-3/+3
2020-11-29Move FIXME markers to TODOs.orgEuAndreh1-3/+1
2020-11-29vps.scm: WIP setup cgitEuAndreh1-25/+83
2020-11-28vps.scm: Add ci.$tld subdomainEuAndreh1-1/+1
2020-11-28vps.scm: Restart NGINX service instead of killing the processEuAndreh1-14/+17
2020-11-26vps.scm: Uncomment opensmtpd-service-typeEuAndreh1-3/+3
2020-11-26vps.scm: Add some FIXME markersEuAndreh1-1/+3
2020-11-26vps.scm: Merge (slurp-trim ...) into (slurp ...)EuAndreh1-7/+6
2020-11-26vps.scm: Use symbols for declaring packagesEuAndreh1-4/+4
2020-11-26vps.scm: Indent (operating-system ...) expressionEuAndreh1-61/+61
2020-11-26vps.scm: Add nginx, certbot and mail-aliases servicesEuAndreh1-13/+59
2020-11-26vps.scm: Start setting up OpenSMTPD configurationEuAndreh1-2/+30
2020-11-26vps.scm: Add missing use for unattended upgradesEuAndreh1-1/+1
2020-11-26vps.scm: Put user name in a variableEuAndreh1-3/+5
2020-11-23vps.scm: Add unattended-upgrade-service-type to the service listEuAndreh1-0/+1
2020-11-22vps.scm: Add mcron-service-type with empyt list of jobsEuAndreh1-2/+5
2020-11-22vps.scm: Add git packageEuAndreh1-1/+2
For using git push commands
2020-11-16vps.scm: Change locale to fr_FR.UTF-8EuAndreh1-1/+1
2020-11-16rsync the full folder to home instead of file by fileEuAndreh1-2/+3
2020-11-16vps.scm: Remove comment from generated OS configurationEuAndreh1-3/+0
2020-11-16vps.scm: Stop inlining content of sudoers fileEuAndreh1-3/+5
2020-11-16Add base Guix configuration and start switching to itEuAndreh1-0/+53
- remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.