aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity
2014 commits 16 branches 0 tags 41 MiB
Commit graph

220 commits

Author SHA1 Message Date
Henrik Lissner ffb097ce0c fail2ban: move maxretry default to jails 
Throws a "option 'maxretry' in section 'DEFAULT' already exists" error
on startup otherwise.
 2021-01-31 18:43:29 -05:00
Henrik Lissner 25a87f24d9 Reduce gitea logging & disable basic auth for api 
- Disabled SQL logs because they quickly fill up the logs and aren't
  useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
  interacting with the gitea API. Tokens/oauth are better.
 2021-01-31 18:39:01 -05:00
Henrik Lissner c32a1846e0 Tweak fail2ban defaults 2021-01-31 18:39:01 -05:00
Henrik Lissner 68fa845a73 Add comments & remove redundant config 
IS_TLS_ENABLED = true is implied if HOST's port is 465
 2021-01-31 18:20:17 -05:00
Henrik Lissner 78d85018b0 Fix redundant nginx directive 
And typo. Should be 128k, not 1k!
 2021-01-30 17:10:25 -05:00
Henrik Lissner fe4a34a9e3 Harden nginx defaults 2021-01-30 17:07:52 -05:00
Henrik Lissner 2da00f3ad5 fail2ban: speed up gitea/bitwarden jails 
These services log to syslog, so a log file doesn't exist, meaning
fail2ban must scan the whole journal to seek authentication failure
logs, which is slow! By specifying a journalmatch, it significantly
narrows the scope of their searches.
 2021-01-30 06:04:38 -05:00
Henrik Lissner d380e06cba Make fail2ban defaults less forgiving 2021-01-30 04:52:13 -05:00
Henrik Lissner 24d5a426f5 Clean up modules/desktop/media/daw.nix 2021-01-30 02:39:00 -05:00
Henrik Lissner f88552ad64 Add modules/services/syncthing.nix 
Generalizes the module so it's not so Henrik-centric. I know,
blasphemous, but the world only sometimes revolves around me.

Also, adds a new, much simpler config for syncthing.
 2021-01-26 23:00:01 -05:00
Henrik Lissner 41ac027216 Add modules/backup.nix 
A rudimentary backup and restoration system.
 2021-01-26 23:00:01 -05:00
Henrik Lissner dd62442c09 Install ripgrep in zsh module 2021-01-26 22:58:47 -05:00
Henrik Lissner be343218e9 Add modules/desktop/browsers/brave.nix 2021-01-26 22:58:47 -05:00
Henrik Lissner 5ceb72ddee Remove services.gitea.disableRegistration default 
This can be done in the host file, once its ready to disable
registration.
 2021-01-26 22:58:47 -05:00
Henrik Lissner e703bd374d New ssh pubkey & redesign 'hey push' 
Remote rebuilding requires root access, but I don't want root ssh
access (even by ssh key) to be a permanent fixture of my servers.  So
I've changed 'hey push' to copy my remote user's `authorized_keys` to
/root/.ssh/ temporarily, until the rebuild is complete. It is removed
afterwards.

This should be done non-destructively in the future, but it suits my
needs for now.
 2021-01-26 22:56:50 -05:00
Henrik Lissner 69d730f89d Add agenix 
Indexes all *.age files in $HOST/secrets/
 2021-01-22 20:01:55 -05:00
Henrik Lissner a1ab0811bb Refactor 2021-01-20 01:28:30 -05:00
Henrik Lissner 096a60d61f
services/nginx: add main user to nginx group 2021-01-02 00:26:07 -05:00
Henrik Lissner bca8c84ab3
Minor refactors & readme revision 2021-01-02 00:26:00 -05:00
Henrik Lissner 608b3472b9
security.acme.acceptTerms = true 
So we don't have to later.
 2021-01-02 00:24:20 -05:00
Henrik Lissner 177a7eec6f
Add services/fail2ban module 
With bitwarden_rs & gitea filters
 2021-01-01 21:19:06 -05:00
Henrik Lissner 25f0d8044a
Minor refactors 2020-12-31 19:34:11 -05:00
Henrik Lissner 13afdacb45
Initial password "nixos" 
Instead of "nix". Will be changed immediately post-install anyway.
 2020-12-31 17:31:29 -05:00
Henrik Lissner e74a392d76
Add modules/shell/bitwarden module 
For bitwarden-cli
 2020-12-21 22:46:17 -05:00
Henrik Lissner dfcb990be4
More comments; add to shiro README.org 2020-12-21 22:38:06 -05:00
Henrik Lissner 203629c476
Add modules.shell.pass.passwordStoreDir option 2020-12-21 22:38:06 -05:00
Henrik Lissner 9572aa99a6
Default gitea to sqlite 
Most portable default.
 2020-12-19 23:02:46 -05:00
Henrik Lissner 807b76e640
hosts/ao: finish bitwarden config 2020-12-19 08:05:05 -05:00
Henrik Lissner 9d257c8e55
Bump 2020-12-19 04:31:58 -05:00
Henrik Lissner c9efc8c9e0
Add basic bitwarden service module 2020-12-18 23:42:52 -05:00
Henrik Lissner 426eedea86
Switch to emacsPgtkGcc 
And bump emacs-overlay
 2020-11-27 13:58:06 -05:00
Henrik Lissner 64a065ef47
Use inkscape from unstable branch 2020-11-17 15:28:05 -05:00
Henrik Lissner d5c807a4f9
Move to nixpkgs/master 
For that 5.9.2 kernel goodness. Since I can track nixpkgs myself, I'm
using nixpkgs/master now (and twice, so I can track them at separate
rates).

Though, for now, nixpkgs == nixpkgs.unstable
 2020-10-30 01:41:35 -04:00
Henrik Lissner afea2c28d8
Remove dependency on killall in bspwmrc 2020-10-26 14:05:10 -04:00
Henrik Lissner f0bd026007
Fix polybar+bspwm onReload handler 2020-10-26 14:04:52 -04:00
Henrik Lissner 804011f538
Refactor flake 2020-10-26 05:48:12 -04:00
Henrik Lissner d8730b6d30
Fix GTK config 2020-10-26 00:28:37 -04:00
Henrik Lissner 86a8f40ea2
Minor comment revision 2020-10-25 15:52:50 -04:00
Henrik Lissner ccdeb4cb8d
Move fonts to theme 2020-10-25 15:52:50 -04:00
Henrik Lissner b81f38aa07
Fix zsh syntax highlighting in first line 
Due to unterminated code.
 2020-10-25 15:52:50 -04:00
Henrik Lissner 7e6c26fd9c
Minor refactors 2020-10-25 15:52:50 -04:00
Henrik Lissner 14e2aada30
Refactor theme system, add 'hey theme' & reload handlers 
Themes can now be swapped with 'hey theme NAME', or reloaded with the
reloadTheme script.
 2020-10-25 15:52:50 -04:00
Henrik Lissner c50a51f987
Rename fluorescence -> alucard 
Since it's dracula inspired 'n all...
 2020-10-23 20:53:34 -04:00
Henrik Lissner 2736c461a1
Add services/teamviewer module 2020-10-21 15:49:45 -04:00
Henrik Lissner 3da2c0c62e
Bump 2020-10-20 15:31:00 -04:00
Henrik Lissner a282ce48ae
Switch to emacsGcc 2020-10-20 15:30:54 -04:00
Henrik Lissner ffed225e8d
Slightly smaller icons in rofi 2020-10-17 23:40:07 -04:00
Henrik Lissner 8f57daf4bd
Minor refactors 2020-10-17 23:40:07 -04:00
Henrik Lissner b7c00a985c
Refactor modules/themes/fluorescence 
Extract functionality, remove redundant wallpaper logic, and simplify
wallpaper options.
 2020-10-17 23:40:06 -04:00
Henrik Lissner c172f7cef3
Fix inputrc & wgetrc locations 
These are config files, not data files.
 2020-10-16 20:18:00 -04:00