Commit Graph

568 Commits

Author SHA1 Message Date
70f766efe0 nixbld: use local mattermost 2024-12-12 12:23:44 +08:00
9045368b16 mattermost: remove free edition banner 2024-12-12 12:22:02 +08:00
9da70bd392 mattermost: build webapp from source 2024-12-12 12:20:04 +08:00
060c6bfe21 nixbld: unscramble email addresses for gitea 2024-12-04 21:21:36 +08:00
da74156ca8 Reduce websites duplication
Redirect www.* URLs to non-www.* with default 301 code in order to reduce number of copies of the websites in search engines

Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-12-04 16:55:36 +08:00
9558882e2b dmesg_restrict is now default on NixOS 24.11 2024-12-04 12:33:07 +08:00
9e74ec65bb nixbld: hydra-restrictdist not needed anymore 2024-12-04 12:25:40 +08:00
1b51f86343 nixbld: patch correct hydra package 2024-12-04 12:25:23 +08:00
b088c11806 nixbld: reduce mattermost spam 2024-12-04 12:06:12 +08:00
6510ba9a2d nixbld: nixpkgs 24.11 2024-12-03 19:27:26 +08:00
81cfe07acd unscramble email 2024-12-03 17:41:25 +08:00
a8593a2e97 flarum: update core and packages 2024-11-29 11:49:31 +08:00
7f10e2b817 nixops: remove juno 2024-11-27 18:52:28 +08:00
2f1235a997 update sb backup key 2024-11-26 21:46:47 +08:00
c7ea537622 Revert "Break cycle dependency of tunnel netdev services on network setup"
Does not solve the problem.

This reverts commit b1779b57cc.
2024-11-25 12:11:36 +08:00
d1236d548d afws: enable file logging with afws group permissions 2024-11-22 15:34:23 +08:00
98c1ecd325 nixops: nixpkgs 24.11 compatibility 2024-11-16 18:49:26 +08:00
45e718d65a nixops: add esavkin to wireshark group 2024-11-06 15:25:21 +08:00
243deb96be nixbld: update Nix patch 2024-11-05 18:45:40 +08:00
b1779b57cc Break cycle dependency of tunnel netdev services on network setup
This changes the following chain after nixos-rebuild switch with modified tunnel interfaces:
stop network-setup -> stop TUN-netdev -> stop network-addresses-TUN -> start network-addresses-TUN (fails since it depends on TUN-netdev which is off).

Chain after this change:
stop TUN-netdev -> stop network-setup -> stop network-addresses-TUN -> start TUN-netdev -> start network-addresses-TUN -> start network-setup

Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-10-30 17:23:52 +08:00
4f8d84e3ef nixbld: enable prioNixbld for new defenestrate 2024-10-30 14:53:56 +08:00
eabd92d2e8 Use tunnel for uploading web-intl
Signed-off-by: Egor Savkin <es@m-labs.hk>
2024-10-24 17:35:34 +08:00
04a64c3710 nixbld: set up RT for m-labs-intl.com 2024-10-24 15:49:41 +08:00
d27ee750a2 m-labs-intl.com VPS setup information
Co-authored-by: Egor Savkin <es@m-labs.hk>
Co-committed-by: Egor Savkin <es@m-labs.hk>
2024-10-21 15:48:17 +08:00
14e9d63ab7 nixbld: apply TCP MSS clamping to USA tunnel 2024-10-17 15:08:27 +08:00
19aee9b59f nixbld: send mail from m-labs-intl.com through trump0 2024-10-17 15:04:50 +08:00
f8a3d54b54 nixbld: update simple-nixos-mailserver 2024-10-17 15:04:14 +08:00
c499a7ce86 nixbld: keep checking SPF for email from tunnel
GRE preserves source IP information.
2024-10-17 14:48:04 +08:00
476f5d1d6c nixbld: update to nextcloud 30 2024-10-16 11:33:07 +08:00
ecf40fb2db nixbld: fix firewall issue with incoming USA tunnel connections 2024-10-15 21:27:43 +08:00
34102e66ad nixbld: install nextcloud forms app 2024-10-15 16:22:33 +08:00
93ae830468 nixbld: disable IPv6 MX for m-labs-intl.com 2024-10-14 14:23:15 +08:00
8af66556b9 nixbld: remove google fonts workaround 2024-10-11 17:27:10 +08:00
94cff9bb09 nixbld: revert 233998b8 (did not fix the problem) 2024-10-08 16:11:12 +08:00
2bf7bb0638 nixbld: connect to USA VPN 2024-10-08 16:09:56 +08:00
3419fe6013 nixbld: remove nkrackow user 2024-10-05 10:15:13 +08:00
ec53c0cbdd nixbld: add eduardotenholder user 2024-10-02 18:41:45 +08:00
0258f5cff4 nixbld: reorganize users (NFC) 2024-10-02 18:40:48 +08:00
b723b7f8c0 nixbld: clean up/update systemPackages 2024-09-30 15:12:01 +08:00
0c336f3dd7 nixbld: do not log refused connections
Happen all the time and spam the kernel log.
2024-09-30 14:40:09 +08:00
11181f0397 nixbld: flarum createDatabaseLocally no longer needed
https://github.com/NixOS/nixpkgs/pull/341340
2024-09-23 10:52:08 +08:00
aaf70f36df nixops: remove user accounts 2024-09-13 13:23:15 +08:00
4a288abe2b nixbld: keep automatic flarum DB migrations 2024-09-10 17:12:44 +08:00
246a375dfb add remote IPsec settings 2024-09-05 14:36:37 +08:00
635f90f0c7 nixbld/flarum: use nix 2024-08-31 17:27:16 +08:00
8a187ba5b9 nixbld: SIT can take larger packets 2024-08-29 18:55:52 +08:00
9383227c5b nixbld: consistent netif variables 2024-08-29 18:53:33 +08:00
233998b8f3 nixbld: work around tunnel bring-up race condition 2024-08-29 18:40:17 +08:00
90a6b84c09 nixbld: work around tunnel TCPMSS issues 2024-08-29 18:39:52 +08:00
23e1fa029a nixbld: upgrade postgresql 2024-08-25 11:06:19 +08:00