Antoine Martin
5371f0eeb5
services: paperless: make sure redis is started
2021-12-27 14:52:44 +01:00
Antoine Martin
196a9b97b7
services: paperless: set ocr mode to noarchive
2021-12-22 22:54:00 +01:00
Antoine Martin
42a9f0def3
services: paperless: fix redis server warning
2021-12-22 20:13:37 +01:00
Antoine Martin
516cbd4ae7
services: paperless: switch from docker to nixos
2021-12-22 19:18:06 +01:00
Antoine Martin
ed7cacb3b4
services: nextcloud: upgrade to nextcloud 23
2021-12-22 18:07:14 +01:00
Antoine Martin
fb1a53e73d
services: fava: workaround file not found bug
2021-11-17 02:29:06 +01:00
Antoine Martin
f558b4b680
poseidon: upgrade deprecated options
2021-11-17 00:58:54 +01:00
Antoine Martin
63af1a317e
services: remove prololo beta testing service
2021-09-24 16:16:27 +02:00
Antoine Martin
7bf83aaac3
services: prololo: bump flake
2021-09-24 14:27:51 +02:00
Antoine Martin
c80a5e9a87
services: setup prololo test service
2021-09-12 22:26:28 +02:00
Antoine Martin
6afcd36d8e
services: lohr: bump flake
...
I should clean that up anyway
2021-09-04 18:21:10 +02:00
Antoine Martin
af0428fe45
services: gitea: upgrade to v1.15.0
2021-08-26 13:58:10 +02:00
Antoine Martin
c94356e24f
services: navidrome: setup restic backups
2021-08-22 17:51:23 +02:00
Antoine Martin
901556f805
services: navidrome: make music folder configurable
2021-08-22 17:24:52 +02:00
Antoine Martin
7ce48f7164
services: add navidrome
2021-08-22 16:43:27 +02:00
Antoine Martin
d8c3f5c987
services: nextcloud: upgrade to nextcloud 22
2021-08-20 01:52:45 +02:00
Antoine Martin
2c7abf829a
services: adapt bitwarden to vaultwarden rename
2021-08-20 01:44:44 +02:00
Antoine Martin
bdd0748620
flake: switch back entire config to unstable
...
Mixing stable and unstable brought me weird problems, so I'm switching
back to unstable entirely until it breaks hard enough to convince me to
go back to stable. :)
2021-08-19 23:34:41 +02:00
Antoine Martin
12c60e9d2e
services: postgresql: upgraded to v13
2021-08-19 21:30:09 +02:00
Antoine Martin
1b7c4d40c6
services: nextcloud: ignore heavy files
2021-08-10 00:33:19 +02:00
Antoine Martin
e8ea4c8b5f
services: nextcloud: regex don't work with restic
2021-08-09 21:13:55 +02:00
Antoine Martin
b00faf77bb
services: move to restic for everything
2021-08-09 20:19:27 +02:00
Antoine Martin
e9c0d157f1
services: restic: make it verbose
2021-08-09 20:14:09 +02:00
Antoine Martin
0c538fbf86
services: backup postgres to restic
2021-08-09 20:11:00 +02:00
Antoine Martin
a763e0549f
services: setup restic backups service
2021-08-09 20:11:00 +02:00
Antoine Martin
bd5aa2cef5
services: setup fava service
2021-08-07 15:40:01 +02:00
Antoine Martin
611308f120
services: paperless: backup correctly
2021-07-19 14:59:15 +02:00
Antoine Martin
0f4ae45828
services: monitoring: set prometheus scrape interval
2021-07-15 10:27:10 +02:00
Antoine Martin
c7c87fcdb4
pkgs: fix grafanaDashboards access in flake
...
The `packages` output from the flake needs flake-utils' `flattenTree` to
be valid (because it doesn't support nested sets), but that only works
if I use `recurseIntoAttrs`.
2021-07-14 21:13:38 +02:00
Antoine Martin
27ae0552eb
services: paperless: fix backup paths
2021-07-14 03:00:36 +02:00
Antoine Martin
829632e360
services: tailscale: make exit node optional
2021-07-14 00:08:40 +02:00
Antoine Martin
c16d8513d2
services: wireguard: removed unused module
...
replaced by tailscale
2021-07-13 23:51:17 +02:00
Antoine Martin
1d8750efed
services: tailscale: move to service
2021-07-13 23:49:45 +02:00
Antoine Martin
39477a85e7
services: paperless: backups
2021-07-13 22:20:21 +02:00
Antoine Martin
786d884e3a
services: monitoring: package grafana dashboards
2021-07-13 17:34:36 +02:00
Antoine Martin
0f8175519b
services: monitoring: update node exporter dash
2021-07-13 17:25:34 +02:00
Antoine Martin
0b983d1358
services: monitoring: add nginx dashboard
2021-07-13 17:25:34 +02:00
Antoine Martin
b6f712b817
services: nginx: enable prometheus exporter
2021-07-13 17:25:34 +02:00
Antoine Martin
2b59116b8d
services: monitoring: only listen on localhost
2021-07-13 17:25:34 +02:00
Antoine Martin
e7219ae988
services: matrix: enable SSL traffic only
...
This is a requirement anyway for homeservers, and the `forceSSL` option
tried to create a redirect for non-SSL traffic, except the `listen`
option only provided SSL endpoints anyway, so this resulted in
additional rules in the nginx config looking like this:
server {
server_name matrix.alarsyo.net ;
location /.well-known/acme-challenge {
root /var/lib/acme/acme-challenge;
auth_basic off;
}
location / {
return 301 https://$host$request_uri ;
}
}
Which led to nginx listening on port 8000 (the default port in this
situation, I imagine)
2021-07-13 13:54:18 +02:00
Antoine Martin
c75458d8c9
services: bitwarden: only listen on local host
...
This was never a problem because the firewall did its job, but better
safe than sorry.
2021-07-13 13:34:26 +02:00
Antoine Martin
d2835ceb77
services: paperless: drop external traffic to docker
2021-07-13 13:22:21 +02:00
Antoine Martin
8eb1fe5001
services: paperless: restrict to Tailscale
2021-07-13 01:31:55 +02:00
Antoine Martin
f0e5e90c10
services: use wildcard certificate
...
Should have done this a long time ago
2021-07-13 01:08:01 +02:00
Antoine Martin
64d479e2ce
services: prometheus: keep metrics for 2 years
2021-07-12 22:12:03 +02:00
Antoine Martin
95733f9e05
services: paperless: setup reverse proxy
2021-07-12 22:11:41 +02:00
Antoine Martin
7c8017af03
services: init nuage
2021-07-06 18:22:57 +02:00
Antoine Martin
568cd2ccd4
services: matrix: add SMS verification support
2021-06-09 15:37:35 +02:00
Antoine Martin
6c17c2d82c
services: matrix: move smtp port note out of secret
2021-06-09 14:57:51 +02:00
Antoine Martin
1b6258e363
services: matrix: add smtp server
2021-06-09 14:53:11 +02:00