Giulio De Pasquale
|
b57c039f70
|
architect: Disable lezzo
|
2023-03-28 18:07:14 +02:00 |
|
Giulio De Pasquale
|
00f7d7506e
|
architect: Disable lidarr
|
2023-03-22 17:07:03 +01:00 |
|
Giulio De Pasquale
|
1864b729a6
|
searx: Disable several search engines enabled by default
|
2023-03-22 16:30:49 +01:00 |
|
Giulio De Pasquale
|
469d13372e
|
architect: Added additional FraMecca devices
|
2023-03-21 16:35:13 +01:00 |
|
Giulio De Pasquale
|
54c46cee32
|
architect: Re-enable docker
|
2023-03-18 17:48:05 +01:00 |
|
Giulio De Pasquale
|
19e317cc5e
|
architect: Disable calibre and docker
|
2023-03-16 16:38:58 +01:00 |
|
Giulio De Pasquale
|
08a2c3c493
|
nginx: Remove TLS version limitation
|
2023-02-27 21:26:36 +01:00 |
|
Giulio De Pasquale
|
7c195babbb
|
nginx: Fix SSL handshake errors
|
2023-02-27 21:18:13 +01:00 |
|
Giulio De Pasquale
|
7144947b5d
|
jellyfin: Remove module, override StateDirectory and follow upstream
|
2023-02-27 20:01:01 +01:00 |
|
Giulio De Pasquale
|
ca0179e662
|
searx: Dark theme as default
|
2023-02-24 22:30:26 +01:00 |
|
Giulio De Pasquale
|
2b854f5fa3
|
architect: Re-enable searxng
|
2023-02-24 22:22:42 +01:00 |
|
Giulio De Pasquale
|
b9060ba7c2
|
prosody: Opened c2s and s2s ports. Cleaned up config
|
2023-02-21 01:28:58 +01:00 |
|
Giulio De Pasquale
|
83c741a107
|
nginx: Force TLS 1.3
|
2023-02-21 01:28:13 +01:00 |
|
Giulio De Pasquale
|
cc9aa1e3a9
|
architect: Removed scripts
|
2023-02-19 06:36:20 +01:00 |
|
Giulio De Pasquale
|
1e0a70db62
|
architect: Removed unused modules
|
2023-02-19 06:35:36 +01:00 |
|
Giulio De Pasquale
|
f924307e64
|
backup: Postponed backups
|
2023-02-19 06:31:24 +01:00 |
|
Giulio De Pasquale
|
e542886345
|
network: changed name for manduria router to router-manduria
|
2023-02-15 06:02:34 +01:00 |
|
Giulio De Pasquale
|
743691255a
|
architect: Removed dodino from wireguard
|
2023-02-15 00:49:21 +01:00 |
|
Giulio De Pasquale
|
650db37686
|
Removed old and unused VPN configs. Cleanup of firewall rules. Removed Giulio devices from WG
|
2023-02-15 00:30:26 +01:00 |
|
Giulio De Pasquale
|
3321ec122a
|
architect: Refactored firewall settings. Added architect.firewall option
|
2023-02-15 00:19:52 +01:00 |
|
Giulio De Pasquale
|
f5668462eb
|
Renamed unstable to unstablePkgs to avoid confusion with nixos-unstable flake
|
2023-02-14 21:30:37 +01:00 |
|
Giulio De Pasquale
|
be0a1be47d
|
architect: Module cleanup
|
2023-02-14 18:15:12 +01:00 |
|
Giulio De Pasquale
|
0fec9adf7c
|
architect: Module cleanup
|
2023-02-14 18:14:06 +01:00 |
|
Giulio De Pasquale
|
608fd46eb4
|
Formatting
|
2023-02-11 03:29:48 +01:00 |
|
Giulio De Pasquale
|
a015dc2a89
|
Removed wireguard devices, cleanup of network names
|
2023-02-11 03:28:35 +01:00 |
|
Giulio De Pasquale
|
1990ed8a65
|
Revert "jellyfin: Cleanup derivation"
This reverts commit 554e5651a7.
|
2023-02-11 03:26:30 +01:00 |
|
Giulio De Pasquale
|
554e5651a7
|
jellyfin: Cleanup derivation
|
2023-02-11 03:18:52 +01:00 |
|
Giulio De Pasquale
|
b341bee052
|
architect: Enable SearxNG
|
2023-02-11 03:16:28 +01:00 |
|
Giulio De Pasquale
|
40d0b5f55c
|
searx: Add service. WIP: use git version
|
2023-02-11 03:15:49 +01:00 |
|
Giulio De Pasquale
|
99cf228d80
|
wireguard: Removed unused if. Renamed personal devices
|
2023-02-08 08:42:33 +01:00 |
|
Giulio De Pasquale
|
dc8aa8406f
|
tailscale: Added additional DNS entries
|
2023-02-08 08:41:59 +01:00 |
|
Giulio De Pasquale
|
b191ea3f42
|
network: Added IPs of some tailscale devices
|
2023-02-08 08:41:21 +01:00 |
|
Giulio De Pasquale
|
394d0d6b48
|
firewall: Accept all incoming connections from tailscale
|
2023-02-08 08:40:58 +01:00 |
|
Giulio De Pasquale
|
51b714c159
|
architect: Add manduria.devs.giugl.io name
|
2023-02-01 21:56:13 +01:00 |
|
Giulio De Pasquale
|
4414011c95
|
network: Added router-lan
|
2023-02-01 21:55:55 +01:00 |
|
Giulio De Pasquale
|
1881025faa
|
architect: Add tailscale IP to hosts for every service
|
2023-02-01 21:55:32 +01:00 |
|
Giulio De Pasquale
|
79116ae1a7
|
architect: Added initial support for Tailscale
|
2023-01-30 09:46:20 +01:00 |
|
Giulio De Pasquale
|
63b2a4aa4b
|
minio: Allow body of 500M. Allow manduria-wg
|
2023-01-01 13:33:52 +01:00 |
|
Giulio De Pasquale
|
9fa04584cc
|
runas.rocks: Fix branch. master -> main
|
2023-01-01 13:33:11 +01:00 |
|
Giulio De Pasquale
|
9d6474a302
|
runas.rocks: Pull hourly
|
2023-01-01 13:32:14 +01:00 |
|
Giulio De Pasquale
|
da8e5572b5
|
lezzo: Pull hourly
|
2023-01-01 13:31:48 +01:00 |
|
Giulio De Pasquale
|
d111743509
|
architect: Removed parisa from network config
|
2022-12-22 18:25:32 +01:00 |
|
Giulio De Pasquale
|
6a6dbb135d
|
architect: Removed ropfuscator's cachix
|
2022-12-22 15:18:20 +01:00 |
|
Giulio De Pasquale
|
2c8c26112b
|
architect: Disable navidrome module
|
2022-12-22 15:13:14 +01:00 |
|
Giulio De Pasquale
|
0177ed496b
|
wireguard: Add framecca
|
2022-12-22 15:12:57 +01:00 |
|
Giulio De Pasquale
|
e36ebc4322
|
network: Add germano and framecca to WAN
|
2022-12-22 15:12:24 +01:00 |
|
Giulio De Pasquale
|
4662a61e71
|
jellyfin: Whitelist gdevices
|
2022-12-22 15:11:49 +01:00 |
|
Giulio De Pasquale
|
be4584aa08
|
gitea: Open gitea to public
|
2022-12-22 15:11:23 +01:00 |
|
Giulio De Pasquale
|
6a5552b56e
|
architect: Enable runas and lezzo nix modules
|
2022-12-09 15:39:24 +01:00 |
|
Giulio De Pasquale
|
c5cf59c32c
|
nginx: Removed service skeleton as multiple domains are not needed anymore
|
2022-12-09 15:38:55 +01:00 |
|
Giulio De Pasquale
|
b64b8ae792
|
matrix: Remove 404 on root because runas.rocks is online
|
2022-12-09 15:36:52 +01:00 |
|
Giulio De Pasquale
|
735f1c2bae
|
jellyfin: Add giulio pc to whitelisted devices
|
2022-12-09 15:36:32 +01:00 |
|
Giulio De Pasquale
|
82ea0222f3
|
Runas and lezzo websites
|
2022-12-09 15:35:32 +01:00 |
|
Giulio De Pasquale
|
7a8bacb5df
|
wireguard: Changed germano public key
|
2022-12-05 12:40:59 +01:00 |
|
Giulio De Pasquale
|
68c1ee4869
|
Removed domains nix file
|
2022-12-01 14:28:32 +01:00 |
|
Giulio De Pasquale
|
932378b309
|
flake: Removed proxy host
|
2022-12-01 14:28:10 +01:00 |
|
Giulio De Pasquale
|
f759f44024
|
gitea: Renamed property to SSH_PORT
|
2022-12-01 14:27:05 +01:00 |
|
Giulio De Pasquale
|
30fd214734
|
nginx, openid: Allow IP whitelist to bypass OpenID auth
|
2022-11-29 14:53:17 +01:00 |
|
Giulio De Pasquale
|
ae4c55fdee
|
gitea: Enable OpenID signin
|
2022-11-29 13:24:48 +01:00 |
|
Giulio De Pasquale
|
74fd09cb16
|
openid: Extend access token validity to one day
|
2022-11-29 13:03:26 +01:00 |
|
Giulio De Pasquale
|
b244bfad7d
|
openid: Revoke tokens on logout
|
2022-11-29 12:56:40 +01:00 |
|
Giulio De Pasquale
|
7ffddeca09
|
nginx: Add default runas.rocks virtualhost
|
2022-11-27 11:24:35 +01:00 |
|
Giulio De Pasquale
|
b93d3a33b0
|
Rename giulio devices, add Steam deck to Wireguard
|
2022-11-27 11:24:12 +01:00 |
|
Giulio De Pasquale
|
6568784680
|
matrix: Add OpenID connection and transfer to runas.rocks
|
2022-11-27 11:23:09 +01:00 |
|
Giulio De Pasquale
|
7e61526538
|
calibre: Add OpenID auth
|
2022-11-22 12:59:27 +01:00 |
|
Giulio De Pasquale
|
75b51d24e9
|
firewall: Allow connections to Minecraft from WAN
|
2022-11-20 14:56:32 +01:00 |
|
Giulio De Pasquale
|
3c4caaaea5
|
jellyfin: Go through SSO auth
|
2022-11-20 14:55:59 +01:00 |
|
Giulio De Pasquale
|
9efea759e4
|
navidrome: Move beets-import script execution from daily to weekly
|
2022-11-15 01:12:54 +01:00 |
|
Giulio De Pasquale
|
1122be76bb
|
nginx: Fix indentation
|
2022-11-15 01:11:39 +01:00 |
|
Giulio De Pasquale
|
d9ef1939b2
|
invidious: Use unstable package
|
2022-11-13 22:04:27 +01:00 |
|
Giulio De Pasquale
|
9259ec098e
|
nitter: Dont use redis (conflict with Nextcloud)
|
2022-11-11 19:25:33 +01:00 |
|
Giulio De Pasquale
|
1a6c6a5351
|
nextcloud: Bump to NC 25
|
2022-11-11 19:17:40 +01:00 |
|
Giulio De Pasquale
|
2e1d374c0b
|
docker: Enable module contents
|
2022-11-11 19:17:25 +01:00 |
|
Giulio De Pasquale
|
84f2d5fc6b
|
Remove hardware.nix.bk
|
2022-11-11 19:17:05 +01:00 |
|
Giulio De Pasquale
|
60018c6a9e
|
architect/default: Removed unused modules, removed cudatoolkit, changed tmpOnTmpfs size, removed node from unsafe packages
|
2022-11-11 19:16:42 +01:00 |
|
Giulio De Pasquale
|
e17d9f5a45
|
calibre, gitea, invidious, matrix, minio, navidrome, nitter: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress
|
2022-11-11 19:12:24 +01:00 |
|
Giulio De Pasquale
|
fac8937571
|
prowlarr: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress
|
2022-11-11 19:10:38 +01:00 |
|
Giulio De Pasquale
|
4d8742c087
|
transmission: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress
|
2022-11-11 19:10:17 +01:00 |
|
Giulio De Pasquale
|
7adfedb7c5
|
plex: Use 127.0.0.1 instead of localhost, avoiding ipv6 listening adddress
|
2022-11-11 19:10:02 +01:00 |
|
Giulio De Pasquale
|
3eaf974a5e
|
nzbget: Switch to nginx client for openid
|
2022-11-11 19:09:21 +01:00 |
|
Giulio De Pasquale
|
bf117df531
|
bazarr, lidarr, deluge, sonarr, radarr: Switch to nginx client for openid
|
2022-11-11 19:08:57 +01:00 |
|
Giulio De Pasquale
|
8118462f59
|
openid: Force nginx app, allow to change only access_role
|
2022-11-11 19:08:00 +01:00 |
|
Giulio De Pasquale
|
0ac62bb2ae
|
reddit: localhost -> 127.0.0.1 to avoid ipv6
|
2022-11-11 00:33:06 +01:00 |
|
Giulio De Pasquale
|
fe05235570
|
jellyfin: localhost -> 127.0.0.1 to avoid ipv6
|
2022-11-11 00:32:54 +01:00 |
|
Giulio De Pasquale
|
928a9a4456
|
minecraft: Switch to unstable
|
2022-11-10 10:59:09 +01:00 |
|
Giulio De Pasquale
|
4bb5af4b5a
|
nginx: Add check_role function to worker init
|
2022-10-28 22:01:07 +02:00 |
|
Giulio De Pasquale
|
2a7af4e910
|
openid: Check for role when authenticating
|
2022-10-28 22:00:29 +02:00 |
|
Giulio De Pasquale
|
09e3ef237b
|
keycloak: Expose /admin endpoint. Use 127.0.0.1 instead of localhost to
avoid IPv6.
|
2022-10-28 18:35:43 +02:00 |
|
Giulio De Pasquale
|
60546992b2
|
keycloak: Only expose recommended endpoints. Redirect main page to account page.
|
2022-10-28 15:24:23 +02:00 |
|
Giulio De Pasquale
|
9180f31c3c
|
deluge: Add ACME
|
2022-10-28 15:03:09 +02:00 |
|
Giulio De Pasquale
|
1be49e4835
|
deluge: Add OpenID auth
|
2022-10-28 14:59:17 +02:00 |
|
Giulio De Pasquale
|
35dbc4f40e
|
nzbget: Add OpenID auth
|
2022-10-28 14:56:40 +02:00 |
|
Giulio De Pasquale
|
4975e3434f
|
bazarr: Add OpenID auth
|
2022-10-28 14:56:25 +02:00 |
|
Giulio De Pasquale
|
7c3485f585
|
lidarr, sonarr: Added OpenID auth
|
2022-10-28 14:48:46 +02:00 |
|
Giulio De Pasquale
|
c9e46ec073
|
radarr: Use openid.nix template
|
2022-10-28 14:43:55 +02:00 |
|
Giulio De Pasquale
|
69ffff50e0
|
radarr: Setup OpenID auth
|
2022-10-28 14:35:43 +02:00 |
|
Giulio De Pasquale
|
c1a2c8238b
|
nginx: Add additional plugins for OpenID to work
|
2022-10-28 14:35:22 +02:00 |
|
Giulio De Pasquale
|
dddc557b46
|
nginx: Use openresty package. Add openidc plugin.
|
2022-10-28 13:40:50 +02:00 |
|
Giulio De Pasquale
|
9a2c8886ed
|
nextcloud: Updates to service
|
2022-10-28 13:32:49 +02:00 |
|
Giulio De Pasquale
|
a6f81150e7
|
keycloack: Add keycloack service
|
2022-10-28 13:32:31 +02:00 |
|