Commit Graph
100 Commits
Author SHA1 Message Date
niten 60d5d50336 Restart secret services if changed 2024-05-21 15:24:46 -07:00
niten 68c8052e0c Add private/tailscale domains to nexus 2024-05-11 14:33:58 -07:00
niten 7bdae87de3 Add public/tailscale domain types for nexus 2024-05-11 13:58:17 -07:00
niten e6109489d4 Don't need to provide public LDAP anymore 2024-03-08 15:11:37 -08:00
niten 751ee6be5d /var/run -> /run 2024-02-04 23:21:36 -08:00
niten b1197db920 Oops, put the option in the wrong place 2024-02-04 23:03:20 -08:00
niten cc0a8b5cba Set up state directory for webmail 2024-02-04 22:45:38 -08:00
niten fe27dc3f3d Do this in a domain-specific way... 2024-02-01 21:00:19 -08:00
niten 62e4276a86 The ::1 network has extra stuff... 2024-01-31 09:56:34 -08:00
niten 38640140c8 v6 is handled...roughly 2024-01-31 09:36:35 -08:00
niten c1c67ecc80 ip -> network, one breaking 2024-01-31 09:26:55 -08:00
niten b0c7b7bd88 hasPrefix needs to get the IP too 2024-01-31 00:17:50 -08:00
niten 2d2f1099ea Add some brackets 2024-01-31 00:14:00 -08:00
niten 9e36dfc6ca domains -> fudo.domains 2024-01-30 22:21:48 -08:00
niten c5d1d11137 Handle IPv6 networks in SPF.
And remove localhost.
2024-01-30 22:19:50 -08:00
niten 16a105a24e Fuckin copy the primary job def 2024-01-13 14:19:08 -08:00
niten 168dc68251 Shouldn't be called 'template' 2024-01-13 13:26:10 -08:00
niten 031600e175 WTF, never changed keyfile placeholder 2024-01-13 13:07:52 -08:00
niten 083defd692 Change Pre/Post KDC jobs to scripts 2024-01-13 10:16:16 -08:00
niten ace843b59d Add coreutils to heimdal hprop job 2024-01-13 09:52:59 -08:00
niten e8a191908e Perform hpropd merge outside of main dir 2024-01-12 16:51:09 -08:00
niten 2a27c0f7b1 Remove unused options 2024-01-12 13:41:19 -08:00
niten 45b15e65fd password -> passwd 2024-01-07 18:09:12 -08:00
niten 92be492607 Don't create users if they don't have passwords 2024-01-07 17:51:23 -08:00
niten f7a5a43d30 Wait, Restart can't be 'never', only 'no' 2024-01-07 15:25:29 -08:00
niten 2c206d394b DELETE. EVERYTHING. 2024-01-07 15:21:07 -08:00
niten 7e533a6d6f Wait, is it ReadWritePaths? 2024-01-07 14:48:42 -08:00
niten dd2df768f1 Disable everything 2024-01-07 09:31:53 -08:00
niten c405597d81 Are numbers not legit? 2024-01-07 09:25:51 -08:00
niten 4196468cf8 Ahh, maybe it's the fact that it's a path 2024-01-07 09:22:44 -08:00
niten 1186de6c36 Just a test... 2024-01-06 23:14:43 -08:00
niten 42f486a6fc writeShellScript is in pkgs 2024-01-06 11:10:18 -08:00
niten 8ba0e155d3 Put launcher in script 2024-01-06 11:06:05 -08:00
niten 12d62caf25 postgres11 is old as shit 2024-01-05 14:11:15 -08:00
niten 8e08f115c5 Don't need the extra wrapper now 2023-12-18 11:36:51 -08:00
niten 9f96e0fa62 snake-case not camelCase 2023-12-11 15:03:02 -08:00
niten a33c958625 Default is no metrics 2023-12-11 14:53:05 -08:00
niten 216e84c94e Only take one grafana & prometheus host 2023-12-11 14:52:20 -08:00
niten 893538d442 No env file anymore 2023-12-11 09:06:19 -08:00
niten f142ce296c Use Authentik for Grafana auth 2023-12-10 22:27:26 -08:00
niten 1aea58945d nework -> network 2023-12-10 16:12:08 -08:00
niten deb3e455bd Only need DB SSL if on a public network 2023-12-10 16:10:09 -08:00
niten 09e6262e83 Remove comment 2023-12-10 15:39:23 -08:00
niten 078a150080 Forget setting the database for now... 2023-12-10 15:01:07 -08:00
niten e8ad5ae2ca Try setting ReadWritePaths... 2023-12-10 14:46:11 -08:00
niten 3b89330f81 Don't use camelCase for opts 2023-12-05 22:38:01 -08:00
niten 26b130ceab typo: enthernet -> ethernet 2023-12-05 22:32:28 -08:00
niten 9b20a19e27 Did I really do that? Geez 2023-12-05 21:12:34 -08:00
niten 72a33bd452 Apparently kea doesn't list->csv for me 2023-12-05 21:09:49 -08:00
niten a169209046 typo: nework -> network 2023-12-05 20:56:36 -08:00
niten c884d59f47 It's kea.dhcp4, not just kea 2023-12-05 20:47:34 -08:00
niten e770842fa6 Switch to Kea for dhcp4 servec 2023-12-05 20:45:34 -08:00
niten cf4b24da99 Add a few more adblock lists for AdGuard 2023-11-27 12:44:58 -08:00
niten 6015d8eaf0 Add reasonable default config options to AdGuard
And allow reverse DNS lookup servers.
2023-11-27 12:13:30 -08:00
niten 04263beb7f Make a module to supply overlay 2023-11-17 09:34:09 -08:00
niten d4044d886a Change the way netMaxIp works 2023-11-04 09:00:00 -07:00
niten 88bcd94803 Remove some more deps to remove cycles, hopefully 2023-11-03 16:08:44 -07:00
niten fdc658a263 Remove more cycle-creating dependencies 2023-11-03 15:49:40 -07:00
niten 10e78ba89f Switch from str -> networkHostOpts for deafult-host 2023-11-03 15:00:53 -07:00
niten 2d96202a58 Ugh, WHAT! 2023-11-03 12:51:28 -07:00
niten e37fe381d5 Change the way intToIpv4 works 2023-11-03 12:42:49 -07:00
niten 7ae766bd8a Print the min & max IPs 2023-11-03 12:29:09 -07:00
niten 70a1a6d6af Fuckin print the network 2023-11-03 12:27:00 -07:00
niten 9d031308aa Need to compare ints 2023-11-03 11:51:22 -07:00
niten a241c56c59 Make 'default-host' a full networkHost, not a str 2023-11-02 10:02:41 -07:00
niten cd1c104bce Oops, multi-line string in systemd 2023-10-19 22:14:01 -07:00
niten a46b71e72b cfg.database -> cfg.kdc.database 2023-10-15 23:14:59 -07:00
niten 56f4e49df0 KDC - Ensure database exists and is readable 2023-10-15 23:00:48 -07:00
niten 356c452d66 Only launch ejabberd if env is available 2023-10-15 21:10:05 -07:00
niten c629223e85 See if requiring works better... 2023-10-13 23:14:59 -07:00
niten 19f117a14b Let's just be explicit about multi-user 2023-10-13 22:06:37 -07:00
niten 1c0d4b207a wantedBy default.target doesn't seem to work... 2023-10-13 22:05:49 -07:00
niten 5079561573 Formatting 2023-10-11 12:03:07 -07:00
niten 1e5cdcba79 This is just tweaking at this point... 2023-10-09 22:58:42 -07:00
niten 169cf84263 Require the FS to be online before loading secrets 2023-10-09 18:55:08 -07:00
niten 130086b6a8 default isn't working 2023-10-09 18:02:12 -07:00
niten 28e16e19e4 Make secrets into RemaiAfterExit oneshot services 2023-10-09 16:10:50 -07:00
niten 7fcbc0bddb Make secrets work again... 2023-10-09 11:35:45 -07:00
niten db5c0b7cd1 Allow for null gssapi-realm 2023-10-08 16:21:24 -07:00
niten 0890bb7b1e Specify full path for chown 2023-10-06 19:08:50 -07:00
niten 37bd62f950 Start all secrets on boot 2023-10-01 22:47:24 -07:00
niten 49009f67e7 Figured out how to correctly change ownership 2023-09-22 23:20:44 -07:00
niten a72e23a198 Fix ref to cfg.state-directory 2023-09-22 22:29:13 -07:00
niten ad5570b7c3 Give ExecStartPre root perms.
Apparently PermissionsStartOnly = false will do that.
2023-09-22 22:25:43 -07:00
niten 7ed8b64466 Make sure kerberos database belongs to kerberos user 2023-09-22 10:08:18 -07:00
niten f3312f8fce Not list concat... 2023-09-06 17:48:23 -07:00
niten 1e1bd7e3b9 Add given name & surname to ldap 2023-09-06 17:43:52 -07:00
niten dbf6cd6337 Add givenName & surname 2023-09-06 17:37:55 -07:00
niten cea913f1fe Apparently it's 'account' that interferes with inetOrgPerson 2023-09-06 16:27:18 -07:00
niten 169dee3939 Ugh 2023-09-06 16:13:37 -07:00
niten bfcd26ae7e Umm 2023-09-06 16:12:34 -07:00
niten 59a0f02001 Um? 2023-09-06 16:10:57 -07:00
niten 92962b83ed Umm...must be getting tired 2023-09-06 16:01:01 -07:00
niten b2d3ef23f2 Apparently some emails are still null? 2023-09-06 15:59:13 -07:00
niten 930f12ab17 Why not inetOrgPerson? 2023-09-06 15:52:30 -07:00
niten 83b85a7495 Moved the stupid hack somewhere more reasonable 2023-09-06 15:49:34 -07:00
niten f5e5e263ef Use correct email 2023-09-06 15:32:11 -07:00
niten e546c70eaa Infinite recursion? 2023-09-06 15:31:00 -07:00
niten 421ecd1f65 Forgot to use the new email 2023-09-06 15:28:50 -07:00
niten e2f29e8f44 Just fuckin hack it 2023-09-06 15:18:49 -07:00