Henrik Lissner
4050e6ae28
users.users.git.isSystemUser = true
2021-05-28 00:19:17 -04:00
Henrik Lissner
8fe1fbb6e7
hosts/ao: refactor backups
2021-03-12 01:01:12 -05:00
Henrik Lissner
c883524efc
Replace backup module with built-in solutions
...
May not be as universal, but is more certain to work correctly than my
hacked up version that I'm not so invested in.
2021-02-22 10:40:22 -05:00
Henrik Lissner
b7d49362a8
gitea.lfs.enable = true
2021-02-01 19:55:05 -05:00
Henrik Lissner
ffb097ce0c
fail2ban: move maxretry default to jails
...
Throws a "option 'maxretry' in section 'DEFAULT' already exists" error
on startup otherwise.
2021-01-31 18:43:29 -05:00
Henrik Lissner
25a87f24d9
Reduce gitea logging & disable basic auth for api
...
- Disabled SQL logs because they quickly fill up the logs and aren't
useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
interacting with the gitea API. Tokens/oauth are better.
2021-01-31 18:39:01 -05:00
Henrik Lissner
68fa845a73
Add comments & remove redundant config
...
IS_TLS_ENABLED = true is implied if HOST's port is 465
2021-01-31 18:20:17 -05:00
Henrik Lissner
2da00f3ad5
fail2ban: speed up gitea/bitwarden jails
...
These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches.
2021-01-30 06:04:38 -05:00
Henrik Lissner
d380e06cba
Make fail2ban defaults less forgiving
2021-01-30 04:52:13 -05:00
Henrik Lissner
41ac027216
Add modules/backup.nix
...
A rudimentary backup and restoration system.
2021-01-26 23:00:01 -05:00
Henrik Lissner
5ceb72ddee
Remove services.gitea.disableRegistration default
...
This can be done in the host file, once its ready to disable
registration.
2021-01-26 22:58:47 -05:00
Henrik Lissner
bca8c84ab3
Minor refactors & readme revision
2021-01-02 00:26:00 -05:00
Henrik Lissner
177a7eec6f
Add services/fail2ban module
...
With bitwarden_rs & gitea filters
2021-01-01 21:19:06 -05:00
Henrik Lissner
25f0d8044a
Minor refactors
2020-12-31 19:34:11 -05:00
Henrik Lissner
9572aa99a6
Default gitea to sqlite
...
Most portable default.
2020-12-19 23:02:46 -05:00
Henrik Lissner
a75c64d04a
Rewrite to use flakes
...
This puts a hard dependency on 20.09, but that's to be expected.
2020-10-11 01:31:33 -04:00
Henrik Lissner
592ee79a83
Modularize config
2020-03-29 01:55:14 -04:00
Henrik Lissner
f170a2eb73
services.gitea.user = git
...
Must match services.gitea.database.user
2019-11-19 02:05:06 -05:00
Henrik Lissner
1d70a55b2a
Generalize gitea module
2019-11-19 00:22:23 -05:00
Henrik Lissner
a62c49661e
Setup gitea on ao
2019-11-18 21:42:57 -05:00
Henrik Lissner
fc28078616
Add modules/services/gitea.nix (WIP)
2019-11-18 01:25:29 -05:00
Henrik Lissner
ed36644143
Initial commit of nixos config
2019-08-06 13:56:54 -04:00
