| 
						
					 | 
					
						
						
							
						
						dd76691f7d
					 | 
					
						
						
							
							pkgs/bijwerken-*,modules/bijwerken: Consolidate system update management and refactor under the same name
						
						
						
						
						
						
					 | 
					
						2025-08-17 21:49:24 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						9357981ff3
					 | 
					
						
						
							
							hosts/monitoring-3: Alert on fem.social unavailable
						
						
						
						
						
						
					 | 
					
						2025-08-17 10:39:01 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						eddb365ae5
					 | 
					
						
						
							
							hosts/monitoring-3: Alert nadja.top down after 15min only
						
						
						
						
						
						
					 | 
					
						2025-08-17 10:17:43 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						d01de7fc4a
					 | 
					
						
						
							
							hosts/monitoring-3: Add dashboards to deployment
						
						
						
						
						
						
					 | 
					
						2025-08-16 22:01:06 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						a1ca9313b9
					 | 
					
						
						
							
							hosts/monitoring-3: Add Nginx Grafana dashboard
						
						
						
						
						
						
					 | 
					
						2025-08-15 20:50:24 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						217ede0307
					 | 
					
						
						
							
							modules/monitoring: Extract metrics from nginx logs
						
						
						
						
						
						
					 | 
					
						2025-08-15 18:14:41 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						643478b724
					 | 
					
						
						
							
							pkgs/generate-blocked-prefixes: Deduplicate prefixes before generating firewall rules
						
						
						
						
						
						
					 | 
					
						2025-08-14 20:20:33 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						13b8ccd087
					 | 
					
						
						
							
							hosts/krypton: don't use onlyoffice anymore
						
						
						
						
						
						
					 | 
					
						2025-08-09 14:59:03 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						7c3a97a90a
					 | 
					
						
						
							
							hosts/web-2: Update legal.clerie.de
						
						
						
						
						
						
					 | 
					
						2025-08-09 11:42:04 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						40338d9b85
					 | 
					
						
						
							
							hosts/monitoring-3: Monitor alertmanager
						
						
						
						
						
						
					 | 
					
						2025-08-09 11:41:34 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						7f6f6281cc
					 | 
					
						
						
							
							profiles/desktop: Migrate from configuration
						
						
						
						
						
						
					 | 
					
						2025-07-29 23:03:58 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						5bd15927d5
					 | 
					
						
						
							
							hosts/web-2: Block Alibaba Cloud because of scraper bots
						
						
						
						
						
						
					 | 
					
						2025-07-18 23:55:33 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						560e53f77b
					 | 
					
						
						
							
							hosts/krypton: Add drune3d program
						
						
						
						
						
						
					 | 
					
						2025-07-12 13:21:30 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						03aa425038
					 | 
					
						
						
							
							hosts/web-2: Add traveldrafter.clerie.de
						
						
						
						
						
						
					 | 
					
						2025-07-06 18:17:31 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						751efd02bb
					 | 
					
						
						
							
							hosts/porter: Enable system auto upgrade
						
						
						
						
						
						
					 | 
					
						2025-07-05 20:16:01 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						43d1133772
					 | 
					
						
						
							
							modules/clerie-system-upgrade: Always reboot after an update
						
						
						
						
						
						
					 | 
					
						2025-06-30 18:35:57 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						4245ae84ed
					 | 
					
						
						
							
							hosts/carbon: Don't make kea depend on non existend network-setup.service anymore
						
						
						
						
						
						
					 | 
					
						2025-06-29 22:25:19 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						60e80ab2e9
					 | 
					
						
						
							
							profiles/gpg-ssh: Move gpg-ssh to profiles
						
						
						
						
						
						
					 | 
					
						2025-06-29 11:51:27 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						691d671420
					 | 
					
						
						
							
							pkgs/clerie-ssh-known-hosts: Expose function as package
						
						
						
						
						
						
					 | 
					
						2025-06-28 16:25:38 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						86bfe85982
					 | 
					
						
						
							
							hosts/porter: Resolve nginx proxy upstreams via unbound
						
						
						
						
						
						
					 | 
					
						2025-06-24 16:42:03 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						e24190ae08
					 | 
					
						
						
							
							hosts/dn42-il-gw1: Open firewall for wireguard tunnel ports
						
						
						
						
						
						
					 | 
					
						2025-06-11 08:07:13 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						9755550435
					 | 
					
						
						
							
							hosts/dn42-il-gw1: AS4242421718 fix link local peer address
						
						
						
						
						
						
					 | 
					
						2025-06-11 08:06:42 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						0dfc013122
					 | 
					
						
						
							
							hosts/dn42-il-gw1: Add peer AS4242421718
						
						
						
						
						
						
					 | 
					
						2025-06-10 23:08:38 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						c97799b97c
					 | 
					
						
						
							
							hosts/monitoring-3: Alert on broken IPv4 to IPv6 proxy
						
						
						
						
						
						
					 | 
					
						2025-06-02 18:46:43 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						096fe1dc03
					 | 
					
						
						
							
							profiles/monitoring-server: Monitor http
						
						
						
						
						
						
					 | 
					
						2025-06-01 14:08:57 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						e475e46e3c
					 | 
					
						
						
							
							profiles/monitoring-server: Fetch monitoring targets from json file
						
						
						
						
						
						
					 | 
					
						2025-06-01 13:31:43 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						50ca6f03ee
					 | 
					
						
						
							
							hosts/porter: Proxy port 80 and 443 to baikonur
						
						
						
						
						
						
					 | 
					
						2025-05-31 13:02:18 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						fae30a0fc5
					 | 
					
						
						
							
							hosts/monitoring-3: Don't alert for /nix/store disk full
						
						
						
						
						
						
					 | 
					
						2025-05-29 12:16:26 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						1042cf279f
					 | 
					
						
						
							
							profiles/hydra-build-machine: Migrate configuration to profile
						
						
						
						
						
						
					 | 
					
						2025-05-08 17:17:01 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						ced991b911
					 | 
					
						
						
							
							profiles/router: Migrate configuration to profile
						
						
						
						
						
						
					 | 
					
						2025-05-08 16:17:26 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						8b9acbb9b1
					 | 
					
						
						
							
							hosts/monitoring-3: Display pretty scraping address for nixos-validator
						
						
						
						
						
						
					 | 
					
						2025-05-08 12:13:54 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						70cde0e367
					 | 
					
						
						
							
							hosts/storage-2: Allow frank access to em
						
						
						
						
						
						
					 | 
					
						2025-05-05 12:24:26 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						593739120a
					 | 
					
						
						
							
							hosts/storage-2: Add location em
						
						
						
						
						
						
					 | 
					
						2025-05-05 12:24:00 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						891b8ae718
					 | 
					
						
						
							
							hosts/clerie-backup: Update hardware configuration
						
						
						
						
						
						
					 | 
					
						2025-04-29 17:26:29 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						f33b8c0cdf
					 | 
					
						
						
							
							hosts/clerie-backup: Move VM to different region
						
						
						
						
						
						
					 | 
					
						2025-04-28 15:54:28 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						ecdb362f60
					 | 
					
						
						
							
							profiles/firefox: Provide default configuration
						
						
						
						
						
						
					 | 
					
						2025-04-27 13:55:33 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						35d572e414
					 | 
					
						
						
							
							hosts/dn42-ildix-service: Disable mimalloc in fernglas so it builds with current nixpkgs
						
						
						
						
						
						
					 | 
					
						2025-04-26 13:45:49 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						4777fb2eae
					 | 
					
						
						
							
							flake.lock: Update fernglas
						
						
						
						
						
						
					 | 
					
						2025-04-23 20:02:47 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						414402561b
					 | 
					
						
						
							
							hosts/backup-4: Replicate backup to palladium
						
						
						
						
						
						
					 | 
					
						2025-04-18 11:24:06 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						c0a8f8116e
					 | 
					
						
						
							
							hosts/nonat: Enable DHCPv6 to try out NTP
						
						
						
						
						
						
					 | 
					
						2025-04-16 21:05:01 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						e9210d4ada
					 | 
					
						
						
							
							hosts/backup-4,hosts/palladium: Setup direct VPN tunnel for backups
						
						
						
						
						
						
					 | 
					
						2025-04-15 20:55:56 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						47921ea988
					 | 
					
						
						
							
							hosts/palladium: Enable monitoring
						
						
						
						
						
						
					 | 
					
						2025-04-15 20:02:38 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						3fdf10641b
					 | 
					
						
						
							
							hosts/palladium: Enable wg-clerie
						
						
						
						
						
						
					 | 
					
						2025-04-15 19:52:24 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						e125d5d3bf
					 | 
					
						
						
							
							hosts/monitoring-3: Alert when GPG key is about to expire
						
						
						
						
						
						
					 | 
					
						2025-04-14 21:45:09 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						cc00e92b51
					 | 
					
						
						
							
							hosts/web-2: asc file type is already in default mime types
						
						
						
						
						
						
					 | 
					
						2025-04-14 21:28:08 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						83a094bbd0
					 | 
					
						
						
							
							hosts/*: Disable DHCPv6Client on every host
						
						
						
						
						
						
					 | 
					
						2025-04-13 17:05:37 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						8af0eb2386
					 | 
					
						
						
							
							profiles/common: Make common-networking the default
						
						
						
						
						
						
					 | 
					
						2025-04-07 21:27:03 +02:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						f9359f4d50
					 | 
					
						
						
							
							hosts/dn42-ildix-service: Migrate to systemd-networkd
						
						
						
						
						
						
					 | 
					
						2025-03-24 21:39:04 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						a44dfd1e65
					 | 
					
						
						
							
							hosts/dn42-ildix-clerie: Migrate to systemd-networkd
						
						
						
						
						
						
					 | 
					
						2025-03-24 20:48:17 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						c100f6e95b
					 | 
					
						
						
							
							hosts/dn42-il-gw1: Migrate to systemd-networkd and dn42-router profile
						
						
						
						
						
						
					 | 
					
						2025-03-22 17:51:03 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
							
							
						
					 |