 niten
|
f9c38a8479
|
Add world-readable option back in, it's used.
|
2024-06-10 17:16:16 -07:00 |
|
|
niten
|
b0b280c231
|
/var/run -> /run
|
2024-06-06 14:02:32 -07:00 |
|
|
niten
|
d604090b94
|
Add fudo-system option
|
2024-06-02 14:40:34 -07:00 |
|
|
niten
|
6d08c1a790
|
Heimdal no longer stores kdc in libexec/heimdal/
|
2024-06-02 13:34:57 -07:00 |
|
|
niten
|
60d5d50336
|
Restart secret services if changed
|
2024-05-21 15:24:46 -07:00 |
|
|
niten
|
68c8052e0c
|
Add private/tailscale domains to nexus
|
2024-05-11 14:33:58 -07:00 |
|
|
niten
|
7bdae87de3
|
Add public/tailscale domain types for nexus
|
2024-05-11 13:58:17 -07:00 |
|
|
niten
|
e6109489d4
|
Don't need to provide public LDAP anymore
|
2024-03-08 15:11:37 -08:00 |
|
|
niten
|
751ee6be5d
|
/var/run -> /run
|
2024-02-04 23:21:36 -08:00 |
|
|
niten
|
b1197db920
|
Oops, put the option in the wrong place
|
2024-02-04 23:03:20 -08:00 |
|
|
niten
|
cc0a8b5cba
|
Set up state directory for webmail
|
2024-02-04 22:45:38 -08:00 |
|
|
niten
|
fe27dc3f3d
|
Do this in a domain-specific way...
|
2024-02-01 21:00:19 -08:00 |
|
|
niten
|
62e4276a86
|
The ::1 network has extra stuff...
|
2024-01-31 09:56:34 -08:00 |
|
|
niten
|
38640140c8
|
v6 is handled...roughly
|
2024-01-31 09:36:35 -08:00 |
|
|
niten
|
c1c67ecc80
|
ip -> network, one breaking
|
2024-01-31 09:26:55 -08:00 |
|
|
niten
|
b0c7b7bd88
|
hasPrefix needs to get the IP too
|
2024-01-31 00:17:50 -08:00 |
|
|
niten
|
2d2f1099ea
|
Add some brackets
|
2024-01-31 00:14:00 -08:00 |
|
|
niten
|
9e36dfc6ca
|
domains -> fudo.domains
|
2024-01-30 22:21:48 -08:00 |
|
|
niten
|
c5d1d11137
|
Handle IPv6 networks in SPF.
And remove localhost.
|
2024-01-30 22:19:50 -08:00 |
|
|
niten
|
16a105a24e
|
Fuckin copy the primary job def
|
2024-01-13 14:19:08 -08:00 |
|
|
niten
|
168dc68251
|
Shouldn't be called 'template'
|
2024-01-13 13:26:10 -08:00 |
|
|
niten
|
031600e175
|
WTF, never changed keyfile placeholder
|
2024-01-13 13:07:52 -08:00 |
|
|
niten
|
083defd692
|
Change Pre/Post KDC jobs to scripts
|
2024-01-13 10:16:16 -08:00 |
|
|
niten
|
ace843b59d
|
Add coreutils to heimdal hprop job
|
2024-01-13 09:52:59 -08:00 |
|
|
niten
|
e8a191908e
|
Perform hpropd merge outside of main dir
|
2024-01-12 16:51:09 -08:00 |
|
|
niten
|
2a27c0f7b1
|
Remove unused options
|
2024-01-12 13:41:19 -08:00 |
|
|
niten
|
45b15e65fd
|
password -> passwd
|
2024-01-07 18:09:12 -08:00 |
|
|
niten
|
92be492607
|
Don't create users if they don't have passwords
|
2024-01-07 17:51:23 -08:00 |
|
|
niten
|
f7a5a43d30
|
Wait, Restart can't be 'never', only 'no'
|
2024-01-07 15:25:29 -08:00 |
|
|
niten
|
2c206d394b
|
DELETE. EVERYTHING.
|
2024-01-07 15:21:07 -08:00 |
|
|
niten
|
7e533a6d6f
|
Wait, is it ReadWritePaths?
|
2024-01-07 14:48:42 -08:00 |
|
|
niten
|
dd2df768f1
|
Disable everything
|
2024-01-07 09:31:53 -08:00 |
|
|
niten
|
c405597d81
|
Are numbers not legit?
|
2024-01-07 09:25:51 -08:00 |
|
|
niten
|
4196468cf8
|
Ahh, maybe it's the fact that it's a path
|
2024-01-07 09:22:44 -08:00 |
|
|
niten
|
1186de6c36
|
Just a test...
|
2024-01-06 23:14:43 -08:00 |
|
|
niten
|
42f486a6fc
|
writeShellScript is in pkgs
|
2024-01-06 11:10:18 -08:00 |
|
|
niten
|
8ba0e155d3
|
Put launcher in script
|
2024-01-06 11:06:05 -08:00 |
|
|
niten
|
12d62caf25
|
postgres11 is old as shit
|
2024-01-05 14:11:15 -08:00 |
|
|
niten
|
8e08f115c5
|
Don't need the extra wrapper now
|
2023-12-18 11:36:51 -08:00 |
|
|
niten
|
9f96e0fa62
|
snake-case not camelCase
|
2023-12-11 15:03:02 -08:00 |
|
|
niten
|
a33c958625
|
Default is no metrics
|
2023-12-11 14:53:05 -08:00 |
|
|
niten
|
216e84c94e
|
Only take one grafana & prometheus host
|
2023-12-11 14:52:20 -08:00 |
|
|
niten
|
893538d442
|
No env file anymore
|
2023-12-11 09:06:19 -08:00 |
|
|
niten
|
f142ce296c
|
Use Authentik for Grafana auth
|
2023-12-10 22:27:26 -08:00 |
|
|
niten
|
1aea58945d
|
nework -> network
|
2023-12-10 16:12:08 -08:00 |
|
|
niten
|
deb3e455bd
|
Only need DB SSL if on a public network
|
2023-12-10 16:10:09 -08:00 |
|
|
niten
|
09e6262e83
|
Remove comment
|
2023-12-10 15:39:23 -08:00 |
|
|
niten
|
078a150080
|
Forget setting the database for now...
|
2023-12-10 15:01:07 -08:00 |
|
|
niten
|
e8ad5ae2ca
|
Try setting ReadWritePaths...
|
2023-12-10 14:46:11 -08:00 |
|
|
niten
|
3b89330f81
|
Don't use camelCase for opts
|
2023-12-05 22:38:01 -08:00 |
|
|
niten
|
26b130ceab
|
typo: enthernet -> ethernet
|
2023-12-05 22:32:28 -08:00 |
|
|
niten
|
9b20a19e27
|
Did I really do that? Geez
|
2023-12-05 21:12:34 -08:00 |
|
|
niten
|
72a33bd452
|
Apparently kea doesn't list->csv for me
|
2023-12-05 21:09:49 -08:00 |
|
|
niten
|
a169209046
|
typo: nework -> network
|
2023-12-05 20:56:36 -08:00 |
|
|
niten
|
c884d59f47
|
It's kea.dhcp4, not just kea
|
2023-12-05 20:47:34 -08:00 |
|
|
niten
|
e770842fa6
|
Switch to Kea for dhcp4 servec
|
2023-12-05 20:45:34 -08:00 |
|
|
niten
|
cf4b24da99
|
Add a few more adblock lists for AdGuard
|
2023-11-27 12:44:58 -08:00 |
|
|
niten
|
6015d8eaf0
|
Add reasonable default config options to AdGuard
And allow reverse DNS lookup servers.
|
2023-11-27 12:13:30 -08:00 |
|
|
niten
|
04263beb7f
|
Make a module to supply overlay
|
2023-11-17 09:34:09 -08:00 |
|
|
niten
|
d4044d886a
|
Change the way netMaxIp works
|
2023-11-04 09:00:00 -07:00 |
|
|
niten
|
88bcd94803
|
Remove some more deps to remove cycles, hopefully
|
2023-11-03 16:08:44 -07:00 |
|
|
niten
|
fdc658a263
|
Remove more cycle-creating dependencies
|
2023-11-03 15:49:40 -07:00 |
|
|
niten
|
10e78ba89f
|
Switch from str -> networkHostOpts for deafult-host
|
2023-11-03 15:00:53 -07:00 |
|
|
niten
|
2d96202a58
|
Ugh, WHAT!
|
2023-11-03 12:51:28 -07:00 |
|
|
niten
|
e37fe381d5
|
Change the way intToIpv4 works
|
2023-11-03 12:42:49 -07:00 |
|
|
niten
|
7ae766bd8a
|
Print the min & max IPs
|
2023-11-03 12:29:09 -07:00 |
|
|
niten
|
70a1a6d6af
|
Fuckin print the network
|
2023-11-03 12:27:00 -07:00 |
|
|
niten
|
9d031308aa
|
Need to compare ints
|
2023-11-03 11:51:22 -07:00 |
|
|
niten
|
a241c56c59
|
Make 'default-host' a full networkHost, not a str
|
2023-11-02 10:02:41 -07:00 |
|
|
niten
|
cd1c104bce
|
Oops, multi-line string in systemd
|
2023-10-19 22:14:01 -07:00 |
|
|
niten
|
a46b71e72b
|
cfg.database -> cfg.kdc.database
|
2023-10-15 23:14:59 -07:00 |
|
|
niten
|
56f4e49df0
|
KDC - Ensure database exists and is readable
|
2023-10-15 23:00:48 -07:00 |
|
|
niten
|
356c452d66
|
Only launch ejabberd if env is available
|
2023-10-15 21:10:05 -07:00 |
|
|
niten
|
c629223e85
|
See if requiring works better...
|
2023-10-13 23:14:59 -07:00 |
|
|
niten
|
19f117a14b
|
Let's just be explicit about multi-user
|
2023-10-13 22:06:37 -07:00 |
|
|
niten
|
1c0d4b207a
|
wantedBy default.target doesn't seem to work...
|
2023-10-13 22:05:49 -07:00 |
|
|
niten
|
5079561573
|
Formatting
|
2023-10-11 12:03:07 -07:00 |
|
|
niten
|
1e5cdcba79
|
This is just tweaking at this point...
|
2023-10-09 22:58:42 -07:00 |
|
|
niten
|
169cf84263
|
Require the FS to be online before loading secrets
|
2023-10-09 18:55:08 -07:00 |
|
|
niten
|
130086b6a8
|
default isn't working
|
2023-10-09 18:02:12 -07:00 |
|
|
niten
|
28e16e19e4
|
Make secrets into RemaiAfterExit oneshot services
|
2023-10-09 16:10:50 -07:00 |
|
|
niten
|
7fcbc0bddb
|
Make secrets work again...
|
2023-10-09 11:35:45 -07:00 |
|
|
niten
|
db5c0b7cd1
|
Allow for null gssapi-realm
|
2023-10-08 16:21:24 -07:00 |
|
|
niten
|
0890bb7b1e
|
Specify full path for chown
|
2023-10-06 19:08:50 -07:00 |
|
|
niten
|
37bd62f950
|
Start all secrets on boot
|
2023-10-01 22:47:24 -07:00 |
|
|
niten
|
49009f67e7
|
Figured out how to correctly change ownership
|
2023-09-22 23:20:44 -07:00 |
|
|
niten
|
a72e23a198
|
Fix ref to cfg.state-directory
|
2023-09-22 22:29:13 -07:00 |
|
|
niten
|
ad5570b7c3
|
Give ExecStartPre root perms.
Apparently PermissionsStartOnly = false will do that.
|
2023-09-22 22:25:43 -07:00 |
|
|
niten
|
7ed8b64466
|
Make sure kerberos database belongs to kerberos user
|
2023-09-22 10:08:18 -07:00 |
|
|
niten
|
f3312f8fce
|
Not list concat...
|
2023-09-06 17:48:23 -07:00 |
|
|
niten
|
1e1bd7e3b9
|
Add given name & surname to ldap
|
2023-09-06 17:43:52 -07:00 |
|
|
niten
|
dbf6cd6337
|
Add givenName & surname
|
2023-09-06 17:37:55 -07:00 |
|
|
niten
|
cea913f1fe
|
Apparently it's 'account' that interferes with inetOrgPerson
|
2023-09-06 16:27:18 -07:00 |
|
|
niten
|
169dee3939
|
Ugh
|
2023-09-06 16:13:37 -07:00 |
|
|
niten
|
bfcd26ae7e
|
Umm
|
2023-09-06 16:12:34 -07:00 |
|
|
niten
|
59a0f02001
|
Um?
|
2023-09-06 16:10:57 -07:00 |
|
|
niten
|
92962b83ed
|
Umm...must be getting tired
|
2023-09-06 16:01:01 -07:00 |
|
|
niten
|
b2d3ef23f2
|
Apparently some emails are still null?
|
2023-09-06 15:59:13 -07:00 |
|
|
niten
|
930f12ab17
|
Why not inetOrgPerson?
|
2023-09-06 15:52:30 -07:00 |
|
|
niten
|
83b85a7495
|
Moved the stupid hack somewhere more reasonable
|
2023-09-06 15:49:34 -07:00 |
|