Bruno BELANYI
78064bb2a1
modules: services: nginx: nginx-sso verbose logs
...
continuous-integration/drone/push Build is passing
For some reason it still doesn't appear in the systemd log...
2021-08-30 17:38:25 +02:00
Bruno BELANYI
70af0ba99a
modules: services: nginx: add SSO
2021-08-30 17:36:39 +02:00
Bruno BELANYI
dc2a3610a6
modules: services: nginx: enable explicitly
2021-08-30 17:36:39 +02:00
Bruno BELANYI
894b571745
secrets: add sso
2021-08-30 17:36:39 +02:00
Bruno BELANYI
2049e7a2c5
secrets: allow lists in types
2021-08-30 15:35:00 +02:00
Bruno BELANYI
7032ddef37
modules: services: use new nginx wrapper
...
continuous-integration/drone/push Build is passing
And when not possible, document why.
Note for the future: there is some repetition in some modules to
configure the correct value of the subdomain, which I happen to know
will line up correctly thanks to the nginx wrapper. A good way to
refactor this in the future would involve avoiding this repetition,
allowing use to query the correct domain in some way...
2021-08-26 15:54:13 +02:00
Bruno BELANYI
81e12969eb
modules: services: nginx: overhaul modularity
...
This should be all that's needed for almost all my services.
2021-08-26 15:54:13 +02:00
Bruno BELANYI
b97eff2479
lib: lists: add countValues
2021-08-26 15:54:13 +02:00
Bruno BELANYI
4f742b69f2
lib: lists: add 'mapFilter'
2021-08-26 15:54:13 +02:00
Bruno BELANYI
11fbbd62eb
home: zsh: clean-up blank in history
continuous-integration/drone/push Build is passing
2021-08-25 12:51:38 +02:00
Bruno BELANYI
d21087ddcd
home: zsh: append to history
...
Otherwise the file is replaced rather than appended to.
2021-08-25 12:44:42 +02:00
Bruno BELANYI
3919a87d9e
home: zsh: do not share history accross shells
...
It's more annoying than helpful...
2021-08-25 12:22:36 +02:00
Bruno BELANYI
3fd487bbd2
home: gdb: fix configuration path
...
continuous-integration/drone/push Build is passing
Turns out the latest version of `gdb` does not yet look for its
configuration in `XDG_CONFIG_HOME`...
2021-08-22 15:02:57 +02:00
Bruno BELANYI
5916ae631d
home: gdb: add rr
2021-08-21 01:13:14 +02:00
Bruno BELANYI
1a436fd962
home: gdb: fix auto-load safe path
2021-08-20 21:22:27 +02:00
Bruno BELANYI
a48303e66d
home: add gdb
continuous-integration/drone/push Build is passing
2021-08-20 20:03:51 +02:00
Bruno BELANYI
30fc01b5ae
modules: services: nextcloud: exclude previews
continuous-integration/drone/push Build is passing
2021-08-19 14:27:40 +02:00
Bruno BELANYI
13684ecdc4
modules: services: backup: make it verbose
2021-08-19 14:27:40 +02:00
Bruno BELANYI
fe720b2de3
machines: porthos: services: enable navidrome
continuous-integration/drone/push Build is passing
2021-08-19 12:23:06 +02:00
Bruno BELANYI
ec6b31f4a6
modules: services: add navidrome
2021-08-19 12:23:06 +02:00
Bruno BELANYI
1335bbfe9d
flake: bump inputs
continuous-integration/drone/push Build is passing
2021-08-19 11:49:41 +02:00
Bruno BELANYI
2cc1925346
modules: services: backup: fix exclude files
...
continuous-integration/drone/push Build is passing
I was using the wrong option... Somehow it didn't error out.
2021-08-09 20:08:43 +02:00
Bruno BELANYI
eb0c5d5895
pkgs: add drone-scp
continuous-integration/drone/push Build is passing
2021-08-08 18:03:19 +02:00
Bruno BELANYI
8c298c26f9
pkgs: unified-hosts-lists: 3.6.4 -> 3.8.5
continuous-integration/drone/push Build is passing
2021-08-07 12:29:41 +02:00
Bruno BELANYI
55a04cfac3
pkgs: bw-pass: report errors to stderr
...
Useful in case the script can't prompt using `rofi`.
2021-07-31 20:17:37 +02:00
Bruno BELANYI
1783c2838b
modules: services: tlp: add power scaling
2021-07-31 16:56:20 +02:00
Bruno BELANYI
e215f7aa1d
modules: services: nextcloud: upgrade version
continuous-integration/drone/push Build is passing
2021-07-29 13:42:28 +02:00
Bruno BELANYI
afb683f1cf
flake: bump inputs
...
And update package names for grafana dashboards to avoid breaking the
config.
2021-07-29 13:42:28 +02:00
Bruno BELANYI
c320387746
modules: services: postgres: upgrade version
2021-07-29 13:03:10 +02:00
Bruno BELANYI
bbb1231ad3
modules: services: postgres: add migration script
...
The process to upgrade is:
* Make sure the version number of the script is one major version over
the service version.
* Activate the script, rebuild configuration.
* Run `upgrade-pg-cluster` as `root`. One can give arguments like
`--link` or `--jobs 4` to speedup the process. See documentation for
some details.
* Change package to new version once the upgrade is finished, rebuild
configuration.
* Optionally, `ANALYZE` the new database.
2021-07-29 13:02:49 +02:00
Bruno BELANYI
9f00d8a38e
modules: services: add postgresql
...
Enable the service itself in other modules when needed, but pin the
package in a single place.
2021-07-29 12:43:28 +02:00
Bruno BELANYI
820b52314f
modules: services: monitoring: add scrape interval
continuous-integration/drone/push Build is passing
2021-07-15 18:54:07 +02:00
Bruno BELANYI
a3293277d9
flake: flatten and filter packages w/ flake-utils
...
continuous-integration/drone/push Build is passing
Instead of my home-grown solution, use one that has been upstreamed.
2021-07-14 21:49:31 +02:00
Bruno BELANYI
2ecd417a68
machines: porthos: services: enable monitoring
continuous-integration/drone/push Build is passing
2021-07-13 19:17:33 +02:00
Bruno BELANYI
4e8045716c
secrets: add monitoring password
2021-07-13 19:17:33 +02:00
Bruno BELANYI
e060476f32
modules: services: add monitoring dashboard
2021-07-13 19:17:33 +02:00
Bruno BELANYI
2458ddf59d
modules: services: add monitoring
...
This includes a dashboard to monitor system ressources, using
Prometheus.
2021-07-13 19:17:33 +02:00
Bruno BELANYI
8927b3182f
flake: bump inputs
2021-07-13 19:08:54 +02:00
Bruno BELANYI
f2dfeeb35b
home: git: use topological order in log
...
It is the one that makes most sense, rather than some kind of date
order...
2021-07-13 17:50:44 +02:00
Bruno BELANYI
971b610cd5
modules: services: matrix: SSL only for server
...
This is a requirement anyway for homeservers, and the `forceSSL` option
tried to create a redirect for non-SSL traffic, except the `listen`
option only provided SSL endpoints anyway, so this resulted in
additional rules in the nginx config looking like this:
```nginx
server {
server_name matrix.belanyi.fr ;
location /.well-known/acme-challenge {
root /var/lib/acme/acme-challenge;
auth_basic off;
}
location / {
return 301 https://$host$request_uri ;
}
}
```
2021-07-13 17:43:31 +02:00
Bruno BELANYI
21f48b5f71
pkgs: bw-pass: change password prompt
continuous-integration/drone/push Build is passing
2021-07-04 11:52:07 +02:00
Bruno BELANYI
a3edf2548b
overlays: transgui: correctly use previous patches
2021-07-04 11:52:07 +02:00
Bruno BELANYI
ea7b064546
home: direnv: update to new option name
...
continuous-integration/drone/push Build is passing
And enable the flakes option.
I don't actually use this on my own projects, but it could be useful for
other projects that I contribute to.
2021-06-30 20:08:07 +02:00
Bruno BELANYI
ff8e64d601
home: mail: add himalaya
...
This mail client is very KISS. I like it.
2021-06-30 20:08:06 +02:00
Bruno BELANYI
791109c3c1
flake: bump inputs
2021-06-30 20:07:55 +02:00
Bruno BELANYI
6eb3942270
home: firefox: add sponsorblock
continuous-integration/drone/push Build is passing
2021-06-27 19:51:04 +02:00
Bruno BELANYI
2232062fd9
home: secrets: use more specific type
...
I will amend it if I need more types, but for now this is fine.
2021-06-27 19:48:42 +02:00
Bruno BELANYI
d6e9f9786d
secrets: use more specific type
...
I will amend it if I need more types, but for now this is fine.
2021-06-27 19:48:26 +02:00
Bruno BELANYI
5abe4e929e
modules: hardware: sound: refactor options
...
continuous-integration/drone/push Build is passing
Do not enable ALSA when using pipewire. Ensure that both pulseaudio and
pipewire are not configured at the same time.
2021-06-27 01:59:07 +02:00
Bruno BELANYI
57717d70ef
home: wm: i3: also toggle xss-lock
2021-06-26 18:38:11 +02:00
Bruno BELANYI