0e62d0a78a
Fix GRE tunnels restarted before udev service started
...
This patch adds explicit requirements for network addresses services to run after and only when udevd service is running. Also depend on virt netdev creation service instead of device
Signed-off-by: Egor Savkin <es@m-labs.hk>
2025-01-14 16:40:35 +08:00
1b0cc6544e
Do not merge PH with main website
...
Signed-off-by: Egor Savkin <es@m-labs.hk>
# Conflicts:
# nixbld-etc-nixos/configuration.nix
2025-01-09 11:00:08 +08:00
18bc04b419
nixbld: attempt to work around 'PHP Error: Invalid compose ID' roundcube bug
2025-01-08 22:11:32 +08:00
3f33c1c980
Revert "Use dedicated website folder for PH region"
...
This reverts commit 0b3fe57a93
2025-01-08 10:32:29 +08:00
0b3fe57a93
Use dedicated website folder for PH region
...
Signed-off-by: Egor Savkin <es@m-labs.hk>
2025-01-07 12:34:26 +08:00
e4b6c68ae3
nixops: add back abdul
2024-12-18 18:19:29 +08:00
060c6bfe21
nixbld: unscramble email addresses for gitea
2024-12-04 21:21:36 +08:00
da74156ca8
Reduce websites duplication
...
Redirect www.* URLs to non-www.* with default 301 code in order to reduce number of copies of the websites in search engines
Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-12-04 16:55:36 +08:00
9558882e2b
dmesg_restrict is now default on NixOS 24.11
2024-12-04 12:33:07 +08:00
9e74ec65bb
nixbld: hydra-restrictdist not needed anymore
2024-12-04 12:25:40 +08:00
1b51f86343
nixbld: patch correct hydra package
2024-12-04 12:25:23 +08:00
b088c11806
nixbld: reduce mattermost spam
2024-12-04 12:06:12 +08:00
6510ba9a2d
nixbld: nixpkgs 24.11
2024-12-03 19:27:26 +08:00
81cfe07acd
unscramble email
2024-12-03 17:41:25 +08:00
a8593a2e97
flarum: update core and packages
2024-11-29 11:49:31 +08:00
7f10e2b817
nixops: remove juno
2024-11-27 18:52:28 +08:00
2f1235a997
update sb backup key
2024-11-26 21:46:47 +08:00
c7ea537622
Revert "Break cycle dependency of tunnel netdev services on network setup"
...
Does not solve the problem.
This reverts commit b1779b57cc
2024-11-25 12:11:36 +08:00
d1236d548d
afws: enable file logging with afws group permissions
2024-11-22 15:34:23 +08:00
98c1ecd325
nixops: nixpkgs 24.11 compatibility
2024-11-16 18:49:26 +08:00
45e718d65a
nixops: add esavkin to wireshark group
2024-11-06 15:25:21 +08:00
243deb96be
nixbld: update Nix patch
2024-11-05 18:45:40 +08:00
b1779b57cc
Break cycle dependency of tunnel netdev services on network setup
...
This changes the following chain after nixos-rebuild switch with modified tunnel interfaces:
stop network-setup -> stop TUN-netdev -> stop network-addresses-TUN -> start network-addresses-TUN (fails since it depends on TUN-netdev which is off).
Chain after this change:
stop TUN-netdev -> stop network-setup -> stop network-addresses-TUN -> start TUN-netdev -> start network-addresses-TUN -> start network-setup
Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-10-30 17:23:52 +08:00
4f8d84e3ef
nixbld: enable prioNixbld for new defenestrate
2024-10-30 14:53:56 +08:00
eabd92d2e8
Use tunnel for uploading web-intl
...
Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-10-24 17:35:34 +08:00
04a64c3710
nixbld: set up RT for m-labs-intl.com
2024-10-24 15:49:41 +08:00
d27ee750a2
m-labs-intl.com VPS setup information
...
Co-authored-by: Egor Savkin <es@m-labs.hk>
Co-committed-by: Egor Savkin <es@m-labs.hk>
2024-10-21 15:48:17 +08:00
14e9d63ab7
nixbld: apply TCP MSS clamping to USA tunnel
2024-10-17 15:08:27 +08:00
19aee9b59f
nixbld: send mail from m-labs-intl.com through trump0
2024-10-17 15:04:50 +08:00
f8a3d54b54
nixbld: update simple-nixos-mailserver
2024-10-17 15:04:14 +08:00
c499a7ce86
nixbld: keep checking SPF for email from tunnel
...
GRE preserves source IP information.
2024-10-17 14:48:04 +08:00
476f5d1d6c
nixbld: update to nextcloud 30
2024-10-16 11:33:07 +08:00
ecf40fb2db
nixbld: fix firewall issue with incoming USA tunnel connections
2024-10-15 21:27:43 +08:00
34102e66ad
nixbld: install nextcloud forms app
2024-10-15 16:22:33 +08:00
93ae830468
nixbld: disable IPv6 MX for m-labs-intl.com
2024-10-14 14:23:15 +08:00
8af66556b9
nixbld: remove google fonts workaround
2024-10-11 17:27:10 +08:00
94cff9bb09
nixbld: revert 233998b8 (did not fix the problem)
2024-10-08 16:11:12 +08:00
2bf7bb0638
nixbld: connect to USA VPN
2024-10-08 16:09:56 +08:00
3419fe6013
nixbld: remove nkrackow user
2024-10-05 10:15:13 +08:00
ec53c0cbdd
nixbld: add eduardotenholder user
2024-10-02 18:41:45 +08:00
0258f5cff4
nixbld: reorganize users (NFC)
2024-10-02 18:40:48 +08:00
b723b7f8c0
nixbld: clean up/update systemPackages
2024-09-30 15:12:01 +08:00
0c336f3dd7
nixbld: do not log refused connections
...
Happen all the time and spam the kernel log.
2024-09-30 14:40:09 +08:00
11181f0397
nixbld: flarum createDatabaseLocally no longer needed
...
https://github.com/NixOS/nixpkgs/pull/341340
2024-09-23 10:52:08 +08:00
aaf70f36df
nixops: remove user accounts
2024-09-13 13:23:15 +08:00
4a288abe2b
nixbld: keep automatic flarum DB migrations
2024-09-10 17:12:44 +08:00
246a375dfb
add remote IPsec settings
2024-09-05 14:36:37 +08:00
635f90f0c7
nixbld/flarum: use nix
2024-08-31 17:27:16 +08:00
8a187ba5b9
nixbld: SIT can take larger packets
2024-08-29 18:55:52 +08:00
9383227c5b
nixbld: consistent netif variables
2024-08-29 18:53:33 +08:00
