jory
75be43140f
feat(hetzner): give stalwart read access to certain keys
2026-08-17 05:26:39 +02:00
jory
38bd5b63f5
feat(hetzner): update password cause i'm stupid and didnt save
CI / Flake check (x86_64-linux) (push) Failing after 2m13s
CI / Flake check (aarch64-linux) (push) Failing after 3h10m50s
2026-08-15 17:07:30 +02:00
jory
31de8eccb0
feat(hetzner): full migration of docker-mailserver to stalwart
CI / Flake check (aarch64-linux) (push) Failing after 3h12m52s
CI / Flake check (x86_64-linux) (push) Failing after 1h2m1s
2026-08-15 15:59:27 +02:00
jory
cb8835bbfb
feat(hetzner): add my api and update website
CI / Flake check (aarch64-linux) (push) Failing after 3h12m24s
CI / Flake check (x86_64-linux) (push) Failing after 3h12m23s
2026-08-14 21:34:50 +02:00
jory
ea79663c96
feat(hetzner): Updated wg-easy to newer version
CI / Flake check (aarch64-linux) (push) Successful in 4m24s
CI / Flake check (x86_64-linux) (push) Successful in 2m3s
2026-08-14 16:10:06 +02:00
jory
2e9ea868b6
feat(hetzner): add restricted release hosting and update CI
CI / Flake check (aarch64-linux) (push) Successful in 5m20s
CI / Flake check (x86_64-linux) (push) Successful in 3m6s
2026-08-11 15:38:56 +02:00
jory
f806506d9a
feat(hetzner): add Stalwart, restic backups, and virtualcam
2026-08-11 15:36:40 +02:00
jory
62c70dab19
chore: improve code formatting and configuration across multiple files
...
CI / Flake check (aarch64-linux) (push) Failing after 17m27s
CI / Flake check (x86_64-linux) (push) Failing after 53m5s
CI / Pre-commit checks (x86_64-linux) (push) Successful in 11s
The diff shows comprehensive code cleanup and formatting improvements across 18 files, including cleaner argument structures, additional package configurations, and improved formatting in the `home/terminal/software/git.nix` hook script.
2026-07-20 06:52:25 +02:00
jory
4ee5658053
chore(coredns): wait for network connectivity to improve service reliability
...
CI / Pre-commit checks (x86_64-linux) (push) Failing after 14s
CI / Flake check (aarch64-linux) (push) Failing after 11m38s
CI / Flake check (x86_64-linux) (push) Failing after 13m22s
Added network-online.target to after and wants arrays to ensure CoreDNS service starts only after network is available. This prevents service failures due to missing DNS resolution during system boot.
2026-07-19 11:35:20 +02:00
jory
5116faf0d3
Harden server and add Nix-native CI + self-hosted Gitea Actions
...
CI / Flake check (aarch64-linux) (push) Successful in 29s
CI / Flake check (x86_64-linux) (push) Successful in 30s
CI / Pre-commit checks (x86_64-linux) (push) Successful in 8s
- caddy: security headers (X-Content-Type-Options/X-XSS-Protection/
X-Frame-Options) on all vhosts + baseline CSP; strip SnappyMail
upstream copies via header_down on mail.severijnse.eu
- tlsa-updater: compute TLSA 3 1 1 from cert SPKI (SHA-256), sync
_25/_465/_993, fail-safe placeholders; coredns zone updated
- pre-commit: wire cachix/git-hooks.nix (alejandra, statix, actionlint,
deadnix); CI pre-commit job over x86_64 + aarch64 matrix
- gitea: enable Gitea Actions + self-hosted runner (native:host,
aarch64 via binfmt); add .gitea/workflows/ci.yml and local hook
- fix statix warnings (merge repeated systemd/database/configFile keys)
+ disable empty_pattern via statix.toml (nixpkgs standard)
- Clean up unused lambda patterns across 38 .nix files via deadnix
- Format whole repo with alejandra (27 files)
- Remove .github/workflows/ci.yml (Gitea shadows .github; runner labels differ)
- Fix CI nix-not-found: export /run/current-system/sw/bin in PATH
- Trim aarch64 from pre-commit matrix (no QEMU binfmt deployed yet)
2026-07-12 09:11:41 +02:00
jory
c5f771bd53
Added hetzner server configs
CI / Formatting check (x86_64-linux) (push) Has been cancelled
CI / Flake check (aarch64-linux) (push) Has been cancelled
CI / Flake check (x86_64-linux) (push) Has been cancelled
CI / Formatting check (aarch64-linux) (push) Has been cancelled
2026-07-11 20:28:51 +02:00
jory
