Commit graph

25 commits

Author SHA1 Message Date
Henrik Lissner 5c29620dee Harden & optimize networking settings 2021-02-21 10:27:17 -05:00
Henrik Lissner 0f0f314643 Add noexec & size=25% to tmpfs on /tmp
Also auto-enable boot.cleanTmpDir if boot.tmpOnTmpfs is off. /tmp
shouldn't be treated as persistent storage!
2021-02-20 20:50:25 -05:00
Henrik Lissner 7d6d44486f hosts/ao: update secret 2021-02-15 13:16:18 -05:00
Henrik Lissner 021d50670c hosts/ao: fix typo in nginx config 2021-02-14 19:20:54 -05:00
Henrik Lissner bb6e4121f3 ao: cache static assets & turn off proxy buffering
Also increase clientMaxBodySize, since I big files could be uploaded
over HTTP.
2021-02-13 15:28:27 -05:00
Henrik Lissner e0c0006554 hosts/ao: gitea.disableRegistration = true
And remove redundant config.
2021-02-01 19:50:55 -05:00
Henrik Lissner 68fa845a73 Add comments & remove redundant config
IS_TLS_ENABLED = true is implied if HOST's port is 465
2021-01-31 18:20:17 -05:00
Henrik Lissner fe4a34a9e3 Harden nginx defaults 2021-01-30 17:07:52 -05:00
Henrik Lissner a7e7b1703a hosts/{ao,shiro}: tweak cpu governors 2021-01-29 14:07:05 -05:00
Henrik Lissner d0309c51a0 hosts/ao: rewrite & use agenix 2021-01-26 22:58:47 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 96a262d81b
hosts/ao: tweak nginx configs 2020-12-19 03:25:04 -05:00
Henrik Lissner e0a127386f
hosts/ao: update services.gitea config
services.gitea.extraConfig was replaced with *.settings.
2020-12-19 02:49:46 -05:00
Henrik Lissner c376499be8
hosts/ao: update hardware config
No longer has an external drive (now that I have a NAS).

And broadcom config isn't needed anyway (I never use wifi with this
system).
2020-12-19 02:49:15 -05:00
Henrik Lissner adc7490733
Fix ao config 2020-12-18 23:42:24 -05:00
Henrik Lissner 804011f538
Refactor flake 2020-10-26 05:48:12 -04:00
Henrik Lissner 14e2aada30
Refactor theme system, add 'hey theme' & reload handlers
Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script.
2020-10-25 15:52:50 -04:00
Henrik Lissner a75c64d04a
Rewrite to use flakes
This puts a hard dependency on 20.09, but that's to be expected.
2020-10-11 01:31:33 -04:00
Henrik Lissner 592ee79a83
Modularize config 2020-03-29 01:55:14 -04:00
Henrik Lissner 51daefb119
ao: plex -> jellyfin, add calibre-server 2020-01-18 21:35:12 -05:00
Henrik Lissner e1785b5171
Don't configure syncthing gui
SSH tunnelling works for me
2020-01-17 19:36:12 -05:00
Henrik Lissner 9c8a5cbc3f
Add aquanaut prompt to zsh on aka/ao 2020-01-17 19:09:02 -05:00
Henrik Lissner 9a625c93a1
ao: fix syncthing gui addr 2020-01-17 19:05:11 -05:00
Henrik Lissner 15c78d7a16
Add ao's hardware-config 2020-01-17 16:32:24 -05:00
Henrik Lissner c7e6da3f73
Major refactor 2020-01-17 04:22:50 -05:00