Commit Graph

Select branches

Hide Pull Requests

master

#1

#10

#11

#13

#20

#21

#3

#33

#39

#40

#41

#42

#43

#44

#45

#46

#47

#49

#5

#6

#8

#9

Mono Color

• d1236d548d afws: enable file logging with afws group permissions master Florian Agbuya 2024-11-22 15:34:23 +0800
• 98c1ecd325 nixops: nixpkgs 24.11 compatibility Sebastien Bourdeauducq 2024-11-16 18:49:26 +0800
• 45e718d65a nixops: add esavkin to wireshark group Sébastien Bourdeauducq 2024-11-06 15:25:21 +0800
• 243deb96be nixbld: update Nix patch Sébastien Bourdeauducq 2024-11-05 18:45:40 +0800
• b1779b57cc Break cycle dependency of tunnel netdev services on network setup Egor Savkin 2024-10-30 17:23:40 +0800
• 4f8d84e3ef nixbld: enable prioNixbld for new defenestrate Sébastien Bourdeauducq 2024-10-30 14:53:56 +0800
• eabd92d2e8 Use tunnel for uploading web-intl Egor Savkin 2024-10-24 17:35:24 +0800
• 04a64c3710 nixbld: set up RT for m-labs-intl.com Sébastien Bourdeauducq 2024-10-24 15:49:41 +0800
• d27ee750a2 m-labs-intl.com VPS setup information Co-authored-by: Egor Savkin <es@m-labs.hk> Co-committed-by: Egor Savkin <es@m-labs.hk> Egor Savkin 2024-10-21 15:48:17 +0800
• c7c6e56a1e Document intl node set up Egor Savkin 2024-06-19 15:33:22 +0800
• 14e9d63ab7 nixbld: apply TCP MSS clamping to USA tunnel Sébastien Bourdeauducq 2024-10-17 15:08:27 +0800
• 19aee9b59f nixbld: send mail from m-labs-intl.com through trump0 Sébastien Bourdeauducq 2024-10-17 15:04:32 +0800
• f8a3d54b54 nixbld: update simple-nixos-mailserver Sébastien Bourdeauducq 2024-10-17 15:04:14 +0800
• c499a7ce86 nixbld: keep checking SPF for email from tunnel Sébastien Bourdeauducq 2024-10-17 14:48:04 +0800
• 785777eb0e Optimize new fw rules and tweak postfix Egor Savkin 2024-10-15 17:41:28 +0800
• 7131a54bb6 Rebase and add intl interface to exceptions Egor Savkin 2024-10-09 11:15:31 +0800
• bbfee50b53 Fix postfix settings so it should load successfully and accept and send messages through tunnel Egor Savkin 2024-10-08 16:00:18 +0800
• 4c300688d9 Fix postfix settings so it should load successfully Egor Savkin 2024-10-07 16:43:43 +0800
• 45b53991d1 Add virtual ips for the gre tunnel Egor Savkin 2024-09-23 13:36:17 +0800
• 5a408bdb63 Return swan into the zoo Egor Savkin 2024-09-20 17:36:31 +0800
• 2f1c794ac0 Use IPv6 for WG transport to decrease latency by 20% Egor Savkin 2024-09-13 15:06:34 +0800
• 8068eb96b3 Ip rules instead of iptables tracking Egor Savkin 2024-09-11 11:28:03 +0800
• 7b98b49fcd Apply tested client configuration Egor Savkin 2024-09-11 11:04:36 +0800
• 367d5a8c4c Use wireguard instead of strongswan since its in the kernel Egor Savkin 2024-09-09 14:04:33 +0800
• 5fb951ba3c WIP: Use gre/ipsec instead of proxy Egor Savkin 2024-08-28 17:25:02 +0800
• 6832725535 Use proxychains-ng instead of tsocks Egor Savkin 2024-08-26 11:59:12 +0800
• 4c9dff8d95 Use tsocks to wrap socks and add sock transport type Egor Savkin 2024-08-23 17:18:56 +0800
• f909cd71a3 Use wildcard instead of explicit specification Egor Savkin 2024-08-22 13:21:22 +0800
• 3959250f0b Use postfix options for routing mails through ssh tunnel Egor Savkin 2024-08-22 12:22:20 +0800
• 476f5d1d6c nixbld: update to nextcloud 30 Sébastien Bourdeauducq 2024-10-16 11:33:07 +0800
• ecf40fb2db nixbld: fix firewall issue with incoming USA tunnel connections Sebastien Bourdeauducq 2024-10-15 21:27:43 +0800
• 34102e66ad nixbld: install nextcloud forms app Sébastien Bourdeauducq 2024-10-15 16:22:33 +0800
• 93ae830468 nixbld: disable IPv6 MX for m-labs-intl.com Sébastien Bourdeauducq 2024-10-14 14:23:15 +0800
• 8af66556b9 nixbld: remove google fonts workaround Sébastien Bourdeauducq 2024-10-11 17:27:10 +0800
• 94cff9bb09 nixbld: revert 233998b8 (did not fix the problem) Sébastien Bourdeauducq 2024-10-08 16:11:12 +0800
• 2bf7bb0638 nixbld: connect to USA VPN Sébastien Bourdeauducq 2024-10-08 16:09:56 +0800
• 3419fe6013 nixbld: remove nkrackow user Sébastien Bourdeauducq 2024-10-05 10:15:13 +0800
• ec53c0cbdd nixbld: add eduardotenholder user Sébastien Bourdeauducq 2024-10-02 18:41:45 +0800
• 0258f5cff4 nixbld: reorganize users (NFC) Sébastien Bourdeauducq 2024-10-02 18:40:48 +0800
• b723b7f8c0 nixbld: clean up/update systemPackages Sébastien Bourdeauducq 2024-09-30 15:12:01 +0800
• 0c336f3dd7 nixbld: do not log refused connections Sébastien Bourdeauducq 2024-09-30 14:40:09 +0800
• 11181f0397 nixbld: flarum createDatabaseLocally no longer needed Sebastien Bourdeauducq 2024-09-23 10:52:08 +0800
• aaf70f36df nixops: remove user accounts Sebastien Bourdeauducq 2024-09-13 13:23:05 +0800
• 4a288abe2b nixbld: keep automatic flarum DB migrations Sébastien Bourdeauducq 2024-09-10 17:12:44 +0800
• 246a375dfb add remote IPsec settings Sébastien Bourdeauducq 2024-09-05 14:36:37 +0800
• 635f90f0c7 nixbld/flarum: use nix Sébastien Bourdeauducq 2024-08-31 17:27:16 +0800
• 8a187ba5b9 nixbld: SIT can take larger packets Sébastien Bourdeauducq 2024-08-29 18:55:52 +0800
• 9383227c5b nixbld: consistent netif variables Sébastien Bourdeauducq 2024-08-29 18:53:33 +0800
• 233998b8f3 nixbld: work around tunnel bring-up race condition Sébastien Bourdeauducq 2024-08-29 18:40:17 +0800
• 90a6b84c09 nixbld: work around tunnel TCPMSS issues Sébastien Bourdeauducq 2024-08-29 18:39:52 +0800
• 23e1fa029a nixbld: upgrade postgresql Sébastien Bourdeauducq 2024-08-25 11:06:19 +0800
• 75035b387e Skip SPF for mails originating from intl Egor Savkin 2024-08-20 10:59:27 +0800
• 4f48ea611a nixops: remove wanglm user Sébastien Bourdeauducq 2024-08-19 11:18:06 +0800
• 6dc8214102 nixbld/backup: include gitea DB dump Sébastien Bourdeauducq 2024-08-17 18:26:17 +0800
• a6b216bb87 nixbld/gitea: move to postgresql Sébastien Bourdeauducq 2024-08-17 18:18:56 +0800
• 2b9b394514 Add virtual aliases for public addresses Egor Savkin 2024-08-16 12:52:48 +0800
• 6e21a95ba8 nixbld/named: add qnetp slave DNS for m-labs-intl.com Sébastien Bourdeauducq 2024-08-15 19:52:42 +0800
• fe1b2ceab8 Add intl IPs to exceptions in fail2ban Egor Savkin 2024-08-14 16:41:51 +0800
• d08186a27a nixbld/named: enable CAA for m-labs-intl.com Sébastien Bourdeauducq 2024-08-14 11:52:25 +0800
• 5d132565e6 nixbld/named: add hooks.m-labs-intl.com Sébastien Bourdeauducq 2024-08-14 11:42:38 +0800
• 97ca7ea3ce nixbld: mail setup for m-labs-intl.com WIP Sébastien Bourdeauducq 2024-08-14 11:38:19 +0800
• b601c12b7d Add SPF and update mail DKIM key so that postfix will be used instead of nginx for mail forwarding Egor Savkin 2024-07-26 17:46:54 +0800
• 6b28001c4e Add hooks subdomain to intl and accept "m-labs-intl.com" addresses in mail Egor Savkin 2024-06-20 17:40:32 +0800
• e24c167f8b Revert "nixbld: block SAP spam" Sébastien Bourdeauducq 2024-08-14 10:58:49 +0800
• 18194be5c3 nixbld: deploy web2019 to the intl domain Co-authored-by: Egor Savkin <es@m-labs.hk> Co-committed-by: Egor Savkin <es@m-labs.hk> Egor Savkin 2024-08-14 10:54:52 +0800
• 9da1ab6707 Single line command since hydra runs command from single user Egor Savkin 2024-08-14 10:52:44 +0800
• 3d4ec9f431 Remove temporary files after uploading website Egor Savkin 2024-06-24 10:57:39 +0800
• befc9f3f61 Deploy web2019 to the intl domain Egor Savkin 2024-06-20 17:43:34 +0800
• 7781d6236e nixbld/rt: disable TCP Sébastien Bourdeauducq 2024-08-11 12:19:15 +0800
• 93e19c74e9 nixbld/rt: use psql peer authentication Sébastien Bourdeauducq 2024-08-11 12:09:30 +0800
• 4ccab3cf2b nixbld: remove outdated DNS records Sébastien Bourdeauducq 2024-08-05 19:13:34 +0800
• 69fe8c9866 nixbld: add flo user Sebastien Bourdeauducq 2024-08-01 07:32:11 +0800
• b769b47075 nixbld: block SAP spam Sebastien Bourdeauducq 2024-07-02 09:56:02 +0200
• f0668fa5b7 juno: mobo swap Sébastien Bourdeauducq 2024-06-27 14:20:30 +0800
• 8422d16978 nixops: add new DSLogic USB ID Sébastien Bourdeauducq 2024-06-26 13:29:20 +0800
• 872dcaa6bc nixbld: serve m-labs-intl.com domain Sébastien Bourdeauducq 2024-06-06 17:29:07 +0800
• ca895df9f3 nixbld: switch to gitea built-in SSH server Sébastien Bourdeauducq 2024-06-06 16:27:39 +0800
• 4e6686dbe9 nixbld: fix gitea emails Sébastien Bourdeauducq 2024-06-05 11:23:24 +0800
• f973d2969a nixbld: fix gitea emails Sébastien Bourdeauducq 2024-06-05 11:23:24 +0800
• 18a41e1c88 nixbld: work around for hydra input issues in restricted mode Sebastien Bourdeauducq 2024-06-03 22:39:00 +0800
• f49a0f825e nixops: typo Sébastien Bourdeauducq 2024-06-02 20:29:37 +0800
• 6c3a89df02 nixops: update wanglm key Sébastien Bourdeauducq 2024-06-02 20:24:25 +0800
• bbc4d663a9 nixops: add new machines Sébastien Bourdeauducq 2024-06-02 17:55:40 +0800
• adad8e9894 nixops: add new users Sébastien Bourdeauducq 2024-06-02 17:55:19 +0800
• f07b292d3b nixbld: disallow user SSH keys Sébastien Bourdeauducq 2024-06-02 14:10:10 +0800
• d91ff8300d nixops: disallow user SSH keys Sébastien Bourdeauducq 2024-06-02 14:04:02 +0800
• bd6c61094f nixbld: update letsencrypt CAA URI Sébastien Bourdeauducq 2024-06-02 13:50:45 +0800
• cc0bf224df nixbld: install mpd Sébastien Bourdeauducq 2024-06-02 13:50:24 +0800
• 41aeae7b2d nixbld: update simple-nixos-mailserver Sébastien Bourdeauducq 2024-06-02 12:59:47 +0800
• 1eac9d249d nixbld: nixos 24.05 Sébastien Bourdeauducq 2024-06-02 12:52:17 +0800
• c3d9b9a7a1 nixbld: small cleanup Sébastien Bourdeauducq 2024-06-02 12:52:01 +0800
• b6263c7dd9 nixops: fix /boot mount options Sébastien Bourdeauducq 2024-05-30 18:43:54 +0800
• 2446d0c946 nixops: mount /opt on rc Sébastien Bourdeauducq 2024-05-30 18:41:43 +0800
• 8879147c8d nixops: add DSLogic to udev Sébastien Bourdeauducq 2024-05-30 12:21:04 +0800
• ca37637771 desktop: install memtest86 Sebastien Bourdeauducq 2024-05-29 17:59:37 +0800
• 6e7b4aa4a9 nixops: add athena machine Sebastien Bourdeauducq 2024-05-28 15:27:21 +0800
• a22e270ac8 nixbld: replace deprecated gitea mailer setting Sebastien Bourdeauducq 2024-05-28 11:44:55 +0800
• bc20cf499b add architeuthis user Sébastien Bourdeauducq 2024-05-26 20:23:47 +0800
• 9285123f8e desktop: install ghex Sebastien Bourdeauducq 2024-05-24 21:46:12 +0800
• 9845ea7832 nixops: nixos 24.05 renamed options Sébastien Bourdeauducq 2024-05-24 11:09:02 +0800