403 commits

Author	SHA1	Message	Date
Daniel Kempkens	99331411a6	mediaserver: wireguard+prowlarr	2023-04-14 00:12:24 +02:00
Daniel Kempkens	6ec1557e42	mediaserver: wireguard+prowlarr	2023-04-13 22:53:48 +02:00
Daniel Kempkens	7ef694d3ed	mediaserver: wireguard wip	2023-04-13 22:46:32 +02:00
Daniel Kempkens	4aab4118c8	mediaserver: wireguard wip	2023-04-13 21:50:21 +02:00
Daniel Kempkens	4b980faa74	mediaserver: wireguard wip	2023-04-13 21:49:48 +02:00
Daniel Kempkens	518b591d88	mediaserver: wireguard wip	2023-04-13 21:43:32 +02:00
Daniel Kempkens	d55857de28	mediaserver: wireguard wip	2023-04-13 21:40:47 +02:00
Daniel Kempkens	0abb702d5a	mediaserver: add openvpn	2023-04-13 20:56:25 +02:00
Daniel Kempkens	9c4a6607b1	mediaserver: revert atuin-sync	2023-04-13 18:56:26 +02:00
Daniel Kempkens	51fa3a9503	mediaserver: install atuin	2023-04-13 18:53:40 +02:00
Daniel Kempkens	7a89f7d48a	mediaserver: add tailscale	2023-04-13 18:16:44 +02:00
Daniel Kempkens	56a1ebafe2	mediaserver: add missing files	2023-04-13 16:51:18 +02:00
Daniel Kempkens	6d5812c1dd	mediaserver: init	2023-04-13 16:45:01 +02:00
Daniel Kempkens	05a2bab249	Styx: Remove nixpkgs patch	2023-04-12 21:13:41 +02:00
Daniel Kempkens	e230e8ea54	adsb-antenna: Re-order caches	2023-04-12 20:04:08 +02:00
Daniel Kempkens	0ae5f45d00	attic: Re-order caches	2023-04-12 20:03:29 +02:00
Daniel Kempkens	b58aff38d1	sail: Re-order caches	2023-04-12 20:03:02 +02:00
Daniel Kempkens	b3cb35ee6d	Styx: Re-order caches	2023-04-12 19:59:33 +02:00
Daniel Kempkens	47c87b7b1e	nginx: Allow LAN access	2023-04-10 22:24:46 +02:00
Daniel Kempkens	edc15bd00c	attic: Optimize IPs via /etc/hosts	2023-04-10 22:13:54 +02:00
Daniel Kempkens	6b8ebc265e	home-proxy: Update	2023-04-09 12:16:33 +02:00
Daniel Kempkens	ebd3ef29e8	fixup	2023-04-09 02:11:14 +02:00
Daniel Kempkens	fbbed3f77a	fixup	2023-04-09 02:05:16 +02:00
Daniel Kempkens	69fb12a054	fixup	2023-04-09 01:58:02 +02:00
Daniel Kempkens	9c634f03e5	fixup	2023-04-09 01:57:25 +02:00
Daniel Kempkens	f4e54adb15	fixup	2023-04-09 01:48:10 +02:00
Daniel Kempkens	1d65b4fe53	fixup	2023-04-09 01:45:25 +02:00
Daniel Kempkens	89e317cad1	fixup	2023-04-09 01:32:04 +02:00
Daniel Kempkens	b12a6473c1	fixup	2023-04-09 00:46:29 +02:00
Daniel Kempkens	22853a338f	fixup	2023-04-09 00:43:37 +02:00
Daniel Kempkens	6178c71493	fixup	2023-04-09 00:40:08 +02:00
Daniel Kempkens	3f717f4b28	wip: home proxy	2023-04-09 00:37:43 +02:00
Daniel Kempkens	91e477c560	Update deps	2023-04-07 20:52:24 +02:00
Daniel Kempkens	e10ec640db	adsb-antenna: Install attic cache	2023-04-07 18:28:01 +02:00
Daniel Kempkens	a52a48ec1e	adsb-antenna: Install attic cache	2023-04-07 18:25:41 +02:00
Daniel Kempkens	965ca1bb24	adsb-antenna: Setup cache	2023-04-07 17:33:50 +02:00
Daniel Kempkens	5bde072742	custom cache: remove	2023-04-05 14:56:50 +02:00
Daniel Kempkens	6b6cd47524	attic: adjust cache time	2023-04-05 14:17:58 +02:00
Daniel Kempkens	6d3e820381	sail: configure missing overlay	2023-04-05 13:16:47 +02:00
Daniel Kempkens	c3f4613074	attic: Enable on systems	2023-04-05 13:12:40 +02:00
Daniel Kempkens	a6db9898e2	atticd: Disable body size checks in nginx	2023-04-05 12:28:15 +02:00
Daniel Kempkens	2955832f15	atticd: use postgres	2023-04-05 12:22:05 +02:00
Daniel Kempkens	dde11064e9	atticd: use postgres	2023-04-05 12:13:11 +02:00
Daniel Kempkens	779c2364a4	atticd: use postgres	2023-04-05 11:53:35 +02:00
Daniel Kempkens	9e70bc0291	atticd: use postgres	2023-04-05 11:50:40 +02:00
Daniel Kempkens	00109d7c09	atticd: use postgres	2023-04-05 11:39:43 +02:00
Daniel Kempkens	3dd11a9e6f	attic: update atticd config	2023-04-05 10:42:21 +02:00
Daniel Kempkens	a4e71f9825	attic: nginx+attic cli	2023-04-05 10:10:31 +02:00
Daniel Kempkens	2d56d35892	attic: nginx+attic cli	2023-04-04 22:43:16 +02:00
Daniel Kempkens	51c1ce5812	attic: nginx+attic cli	2023-04-04 22:30:12 +02:00
Daniel Kempkens	75af9cd046	attic: add acme	2023-04-04 22:05:11 +02:00
Daniel Kempkens	80ba946430	attic: add binary cache	2023-04-04 20:26:21 +02:00
Daniel Kempkens	1231fd52bb	attic: add binary cache	2023-04-04 20:20:09 +02:00
Daniel Kempkens	bf4b0eb3f8	attic: add binary cache	2023-04-04 20:16:11 +02:00
Daniel Kempkens	163183059a	atticd: fixup	2023-04-04 17:22:37 +02:00
Daniel Kempkens	c84bdde758	atticd: init	2023-04-04 17:20:09 +02:00
Daniel Kempkens	f809dc9c84	attic: fix	2023-04-04 15:10:18 +02:00
Daniel Kempkens	56d0e7b9fa	tailscale: use agenix	2023-04-04 15:05:39 +02:00
Daniel Kempkens	43ff628e80	system: init attic	2023-04-04 14:35:49 +02:00
Daniel Kempkens	99eb5964ad	invidious: Adjust channel_refresh_interval	2023-04-04 12:27:43 +02:00
Daniel Kempkens	7dfa718460	Styx: Update nix-gc interval	2023-04-04 10:41:30 +02:00
Daniel Kempkens	760be91370	nginx: re-enable quic/http3	2023-04-03 15:03:52 +02:00
Daniel Kempkens	0a0feed535	Revert "all frontends: try removing ipv6 addr" ... This reverts commit 1408ac1b74.	2023-04-03 14:52:41 +02:00
Daniel Kempkens	1408ac1b74	all frontends: try removing ipv6 addr	2023-04-03 14:49:20 +02:00
Daniel Kempkens	7a2339231c	nginx: Enable zstd	2023-04-03 14:05:24 +02:00
Daniel Kempkens	2b4e2bb72a	sail: Reorder network config	2023-03-28 21:50:32 +02:00
Daniel Kempkens	13b37924c5	sail: Adjust networkd config	2023-03-28 19:20:58 +02:00
Daniel Kempkens	fdc1e11bae	sail: Re-Enable IPv6	2023-03-28 18:25:45 +02:00
Daniel Kempkens	9804ec0042	sail: switch to networkd	2023-03-28 18:18:54 +02:00
Daniel Kempkens	a5c8017ff3	sail: switch to networkd	2023-03-28 18:14:46 +02:00
Daniel Kempkens	ba60ccfe29	sail: switch to networkd	2023-03-28 17:54:16 +02:00
Daniel Kempkens	417ff3a9b4	sail: switch to networkd	2023-03-28 17:42:22 +02:00
Daniel Kempkens	bdb64abf93	Update deps	2023-03-24 20:16:19 +01:00
Daniel Kempkens	26235ed3d3	alt frontends: listen on ts ipv6 address	2023-03-24 15:37:06 +01:00
Daniel Kempkens	ea675ad396	sail: Alternative frontends should only listen on tailscale	2023-03-23 10:11:11 +01:00
Daniel Kempkens	9132f1ed17	invidious: use quic	2023-03-22 11:13:57 +01:00
Daniel Kempkens	c5b49d4446	atuin: use DynamicUser	2023-03-20 20:14:08 +01:00
Daniel Kempkens	70d1f841f5	nitter: pass config via LoadCredential	2023-03-20 19:47:31 +01:00
Daniel Kempkens	1d6ee0ba11	invidious: set external_port	2023-03-20 15:05:57 +01:00
Daniel Kempkens	756f8a4af3	invidious: only listen via tailscale	2023-03-20 14:24:04 +01:00
Daniel Kempkens	7c57c278a2	invidious: disable registrations	2023-03-20 14:10:00 +01:00
Daniel Kempkens	30355502e1	invidious: init	2023-03-20 14:07:23 +01:00
Daniel Kempkens	03860af6eb	invidious: init	2023-03-20 14:00:36 +01:00
Daniel Kempkens	06ebe75eb1	invidious: init	2023-03-20 13:49:46 +01:00
Daniel Kempkens	baf0cb0b58	Styx: Do not cache to CF anymore	2023-03-20 13:48:37 +01:00
Daniel Kempkens	c4cc5cf244	Styx: Use nix-darwin to init fish	2023-03-19 21:47:23 +01:00
Daniel Kempkens	c78a5376c9	Remove all references to arion	2023-03-19 15:51:22 +01:00
Daniel Kempkens	4f68c3c328	adsb: Move to podman and remove arion	2023-03-19 13:04:48 +01:00
Daniel Kempkens	84b6a38492	wip: remove arion	2023-03-19 01:10:50 +01:00
Daniel Kempkens	2f9158254f	mosquitto: enable service	2023-03-17 22:05:18 +01:00
Daniel Kempkens	6be487f012	webserver: rename to weewx	2023-03-17 21:58:31 +01:00
Daniel Kempkens	5497d30b02	podman: Remove watchtower	2023-03-17 11:22:50 +01:00
Daniel Kempkens	e77a675ff5	arion: Remove CNI Plugins	2023-03-17 00:18:49 +01:00
Daniel Kempkens	ac158673d3	arion: Improvements to podman setup	2023-03-17 00:13:38 +01:00
Daniel Kempkens	b949f5e9c7	arion: Improvements to podman setup	2023-03-17 00:08:43 +01:00
Daniel Kempkens	32ac241aca	arion: Switch to podman	2023-03-16 21:06:46 +01:00
Daniel Kempkens	ab28770d44	arion: Switch to podman	2023-03-16 20:54:44 +01:00
Daniel Kempkens	f9c16471ba	arion: Switch to podman	2023-03-16 20:49:12 +01:00
Daniel Kempkens	d1e8296bc3	arion: Switch to podman	2023-03-16 20:46:27 +01:00
Daniel Kempkens	db1c7e94b3	arion: Switch to podman	2023-03-16 20:34:49 +01:00
Daniel Kempkens	6529b5ac8a	arion: Switch to podman	2023-03-16 20:18:19 +01:00
Daniel Kempkens	d7779eebfb	arion: Switch to podman	2023-03-16 20:17:52 +01:00
Daniel Kempkens	a0a6f45a3a	arion: Switch to podman	2023-03-16 20:16:06 +01:00
Daniel Kempkens	07ca88bbc2	nginx: increase log buffering	2023-03-13 23:42:24 +01:00
Daniel Kempkens	a58e6ba10d	nginx: log buffering	2023-03-13 23:38:11 +01:00
Daniel Kempkens	983638a4cd	fixup	2023-03-13 23:31:21 +01:00
Daniel Kempkens	80193701a2	nginx: Improve logging	2023-03-13 23:28:01 +01:00
Daniel Kempkens	c84e190f19	watchtower: FW rules	2023-03-13 10:41:35 +01:00
Daniel Kempkens	20687306fb	watchtower: Run every 6h and update self	2023-03-13 09:53:59 +01:00
Daniel Kempkens	5107567c5d	watchtower: Run every 6h and update self	2023-03-13 09:50:54 +01:00
Daniel Kempkens	c645eed5b9	watchtower: set hostname	2023-03-13 01:13:25 +01:00
Daniel Kempkens	fba636d19a	watchtower: send notifcations via ntfy	2023-03-12 22:39:27 +01:00
Daniel Kempkens	5232858822	sail: Expose certain services only via SSL	2023-03-12 21:03:36 +01:00
Daniel Kempkens	5114ab5d10	atuin-sync: Remove unused FW rule	2023-03-12 20:54:01 +01:00
Daniel Kempkens	3f16f7de55	"Expose" atuin via HTTPS	2023-03-12 20:53:03 +01:00
Daniel Kempkens	2aa59d4534	acme: Reload nginx after cert change	2023-03-08 22:02:24 +01:00
Daniel Kempkens	6924f5cda0	synapse: fix	2023-03-07 12:07:07 +01:00
Daniel Kempkens	4a41edb9f1	sail: Enable KTLS on docs website(s)	2023-03-07 10:02:50 +01:00
Daniel Kempkens	cbc86a4b60	mastodon: Hide upstream Strict-Transport-Security header	2023-03-07 09:56:19 +01:00
Daniel Kempkens	465392e82f	sail: Enable KTLS for mastodon-cdn	2023-03-07 08:51:09 +01:00
Daniel Kempkens	17c445c8e4	sail: Fix HSTS preload entries	2023-03-06 23:39:49 +01:00
Daniel Kempkens	6adbb3bbda	sail: Try setting STS headers for SSL only	2023-03-06 23:33:55 +01:00
Daniel Kempkens	e7c000eb0c	sail: Try setting STS headers for SSL only	2023-03-06 23:32:06 +01:00
Daniel Kempkens	646c96fb6b	sail: Try setting STS headers for SSL only	2023-03-06 23:30:04 +01:00
Daniel Kempkens	e6cebb3932	sail: Try setting STS headers for SSL only	2023-03-06 23:28:11 +01:00
Daniel Kempkens	7f01ca9bd0	sail: Try setting STS headers for SSL only	2023-03-06 23:27:39 +01:00
Daniel Kempkens	49ad022515	sail: Try setting STS headers for SSL only	2023-03-06 23:22:47 +01:00
Daniel Kempkens	0e10df1518	sail: Try setting STS headers for SSL only	2023-03-06 23:21:51 +01:00
Daniel Kempkens	c0e051092f	sail: Remove cloudflared	2023-03-06 22:25:45 +01:00
Daniel Kempkens	ee065a6fe9	Mastodon: Support all "old" paths	2023-03-06 22:00:48 +01:00
Daniel Kempkens	dcd193e4e6	Mastodon: Remove assets from CF	2023-03-06 21:55:07 +01:00
Daniel Kempkens	7b49b86ac0	Mastodon: Remove assets from CF	2023-03-06 21:47:25 +01:00
Daniel Kempkens	7bdf08abd1	Mastodon: Remove assets from CF	2023-03-06 21:24:46 +01:00
Daniel Kempkens	32c7a32567	synapse: Fixup	2023-03-06 19:09:07 +01:00
Daniel Kempkens	0145e37a75	synapse: Expose 8443	2023-03-06 19:05:44 +01:00
Daniel Kempkens	0bc2169913	sail: Remove Matrix from CF	2023-03-06 18:23:32 +01:00
Daniel Kempkens	c088193e28	sail: Partially move Mastodon off of CF	2023-03-06 17:11:13 +01:00
Daniel Kempkens	a50276f120	freshrss: Add missing fastcgi params	2023-03-06 16:06:32 +01:00
Daniel Kempkens	8580d4ec26	freshrss: do not use auto-generated nginx entry	2023-03-06 15:58:28 +01:00
Daniel Kempkens	714dc0eee0	sail: Move more from CF	2023-03-06 15:25:59 +01:00
Daniel Kempkens	69948f06ce	sail: Move docs from CF	2023-03-06 12:06:59 +01:00
Daniel Kempkens	dfcc5d6f8f	sail: Open HTTP3 FW port	2023-03-06 10:45:35 +01:00
Daniel Kempkens	2ac52f1b02	sail: Enable HTTP3	2023-03-06 10:21:34 +01:00
Daniel Kempkens	779371ac42	sail: Move more hosts away from CF	2023-03-06 09:55:28 +01:00
Daniel Kempkens	2ba78483db	acme: fix group	2023-03-05 23:54:42 +01:00
Daniel Kempkens	c01d25d3fe	sail: Update libreddit nginx config	2023-03-05 23:51:30 +01:00
Daniel Kempkens	d86187e2ee	sail: make firewall rules more specific	2023-03-05 23:28:42 +01:00
Daniel Kempkens	c3cb43184c	acme: fixup	2023-03-05 23:12:10 +01:00
Daniel Kempkens	fa9530f333	sail: wip acme	2023-03-05 23:02:49 +01:00
Daniel Kempkens	ea0338519d	Add rimgo	2023-03-05 19:22:15 +01:00