15 Commits

Author	SHA1	Message	Date
jory	ac2ca3c8be	feat(hetzner): add netdata	2026-08-24 20:08:43 +02:00
jory	9f7431bb36	feat(virtualcam): add Google OAuth, enable Shkeeper payments, update Caddy rules ... - Update virtualcam website and API to latest repository revisions. - Add Google OAuth client ID and secrets decryption for Google auth. - Enable Shkeeper BTC/USD payment processing (`BYPASS_PAYMENTS=false`) and add service dependencies. - Update Caddy `admin_gate` IP access rules and remove redundant `admin_gate` import from app proxy. - Configure weekly automatic Nix garbage collection (`--delete-older-than 14d`) and nix store optimization.	2026-08-22 16:52:08 +02:00
jory	b80316267f	feat(hetzner): update virtualcam with bypassing payments	2026-08-22 14:46:22 +02:00
jory	e64c3d1310	feat(hetzner): fix SMTP on virtualcam website and rm opencode	2026-08-17 05:29:08 +02:00
jory	75be43140f	feat(hetzner): give stalwart read access to certain keys	2026-08-17 05:26:39 +02:00
jory	38bd5b63f5	feat(hetzner): update password cause i'm stupid and didnt save	2026-08-15 17:07:30 +02:00
jory	31de8eccb0	feat(hetzner): full migration of docker-mailserver to stalwart	2026-08-15 15:59:27 +02:00
jory	cb8835bbfb	feat(hetzner): add my api and update website	2026-08-14 21:34:50 +02:00
jory	ea79663c96	feat(hetzner): Updated wg-easy to newer version	2026-08-14 16:10:06 +02:00
jory	2e9ea868b6	feat(hetzner): add restricted release hosting and update CI	2026-08-11 15:38:56 +02:00
jory	f806506d9a	feat(hetzner): add Stalwart, restic backups, and virtualcam	2026-08-11 15:36:40 +02:00
jory	62c70dab19	chore: improve code formatting and configuration across multiple files ... The diff shows comprehensive code cleanup and formatting improvements across 18 files, including cleaner argument structures, additional package configurations, and improved formatting in the `home/terminal/software/git.nix` hook script.	2026-07-20 06:52:25 +02:00
jory	4ee5658053	chore(coredns): wait for network connectivity to improve service reliability ... Added network-online.target to after and wants arrays to ensure CoreDNS service starts only after network is available. This prevents service failures due to missing DNS resolution during system boot.	2026-07-19 11:35:20 +02:00
jory	5116faf0d3	Harden server and add Nix-native CI + self-hosted Gitea Actions ... - caddy: security headers (X-Content-Type-Options/X-XSS-Protection/ X-Frame-Options) on all vhosts + baseline CSP; strip SnappyMail upstream copies via header_down on mail.severijnse.eu - tlsa-updater: compute TLSA 3 1 1 from cert SPKI (SHA-256), sync _25/_465/_993, fail-safe placeholders; coredns zone updated - pre-commit: wire cachix/git-hooks.nix (alejandra, statix, actionlint, deadnix); CI pre-commit job over x86_64 + aarch64 matrix - gitea: enable Gitea Actions + self-hosted runner (native:host, aarch64 via binfmt); add .gitea/workflows/ci.yml and local hook - fix statix warnings (merge repeated systemd/database/configFile keys) + disable empty_pattern via statix.toml (nixpkgs standard) - Clean up unused lambda patterns across 38 .nix files via deadnix - Format whole repo with alejandra (27 files) - Remove .github/workflows/ci.yml (Gitea shadows .github; runner labels differ) - Fix CI nix-not-found: export /run/current-system/sw/bin in PATH - Trim aarch64 from pre-commit matrix (no QEMU binfmt deployed yet)	2026-07-12 09:11:41 +02:00
jory	c5f771bd53	Added hetzner server configs	2026-07-11 20:28:51 +02:00