Commit graph

103 commits

Author SHA1 Message Date
Lu Wang 370324be1c
services/miniflux: enable client authentication 2025-01-03 22:41:37 +08:00
Lu Wang c015c8eccc
treewide: move ntfy and prometheus to suwako-vie1 2025-01-03 22:32:05 +08:00
Lu Wang 7bcb08990f
treewide: update domains for some services 2025-01-02 23:29:54 +08:00
Lu Wang d305459834
services/vaultwarden: init 2025-01-01 20:11:47 +08:00
Lu Wang 8106f088f5
Revert "treewide: move well-known from suwako-vie0 to suwako-vie1"
This reverts commit 51dd6459fe.
2025-01-01 19:05:29 +08:00
Lu Wang 46085e5d9c
treewide: dedup monitoring profile imports 2025-01-01 10:24:32 +08:00
Lu Wang 437bf52b60
treewide: move mail server from suwako-vie0 to suwako-vie1 2025-01-01 10:16:52 +08:00
Lu Wang 51dd6459fe
treewide: move well-known from suwako-vie0 to suwako-vie1 2025-01-01 09:55:18 +08:00
Lu Wang f1a4aabec3
treewide: move secondary dns from suwako-vie0 to suwako-vie1 2025-01-01 09:55:16 +08:00
Lu Wang 6f4206f025
treewide: init suwako-vie1 2025-01-01 09:34:38 +08:00
Lu Wang d877994add
treewide: drop reisen-fra0 2025-01-01 08:12:40 +08:00
Lu Wang 7a68c0c102
system/preservation: drop permission config for certain directories 2024-12-30 04:31:37 +08:00
Lu Wang a335722afd
services/nscd: use tmpfiles for proper lifetime guarantees 2024-12-30 02:46:20 +08:00
Lu Wang 0c28d393fa
networking/netns: rename default netns to init netns 2024-12-29 00:45:40 +08:00
Lu Wang 886f8c4031
networking/netns: set NSNCD_SOCKET_PATH for nsncd 2024-12-28 15:38:21 +08:00
Lu Wang e54ad53ab8
treewide: avoid unnecessary permission management with preservation 2024-12-27 16:46:04 +08:00
Lu Wang 4de514f6b4
treewide: refine the granularity of preservation 2024-12-27 02:39:40 +08:00
Lu Wang f28c4d7d7c
treewide: drop impermanence in favor of preservation 2024-12-27 02:38:57 +08:00
Lu Wang 6c422a41c6
services/logrotate: init for custom state path 2024-12-27 02:38:57 +08:00
Lu Wang fa9a4b9ae0
services/nscd: preserve /run/nscd for bind mounts and hardening nsncd 2024-12-25 18:30:53 +08:00
Lu Wang b0a5257254
treewide: raise stateVersion to 24.11 2024-12-24 22:14:33 +08:00
Lu Wang 49521a3df5
treewide: dedup global persistence configuration 2024-12-24 21:55:34 +08:00
Lu Wang bf02e988b3
treewide: dedup btrfs auto scrub configuration 2024-12-24 21:41:45 +08:00
Lu Wang fd97c33c56
treewide: dedup disko configuration 2024-12-24 21:17:36 +08:00
Lu Wang 71ed8b5ebb
services/prometheus: collect ping metrics in enthalpy network 2024-12-22 23:41:00 +08:00
Lu Wang ac082d8fec
services/prometheus: collect caddy metrics 2024-12-22 22:20:43 +08:00
Lu Wang 4d72d754ed
services/prometheus: setup alertmanager with ntfy 2024-12-22 17:21:03 +08:00
Lu Wang 9a5198aabd
services/prometheus: add blackbox exporter for dns_soa and http check 2024-12-22 17:21:01 +08:00
Lu Wang d201469424
infra: reverse proxy prometheus with cloudflare 2024-12-22 15:11:34 +08:00
Lu Wang 20b9063f37
infra: init authenticated origin pulls for ntfy 2024-12-22 02:49:43 +08:00
Lu Wang b364c8d186
hosts/suwako-vie0: disable ntfy 2024-12-22 00:23:46 +08:00
Lu Wang 37af72eb5b
services/prometheus: add rules 2024-12-21 22:04:05 +08:00
Lu Wang c6935ca7f7
inputs: bump 2024-12-21 21:36:01 +08:00
Lu Wang 68d8d0a13c
services/prometheus: init server 2024-12-21 20:42:30 +08:00
Lu Wang a06f67bf23
hosts: enable prometheus metrics 2024-12-21 20:23:35 +08:00
Lu Wang 8bb43c697c
services/prometheus: init metrics 2024-12-21 20:22:42 +08:00
Lu Wang 92eb5b1ac4
networking/ports: update enthalpy-ipsec port to 14000 2024-12-21 13:36:14 +08:00
Lu Wang 0e45380338
services/enthalpy: raise retransmission timeout 2024-12-21 01:42:13 +08:00
Lu Wang bc44eb8424
services/mail: hardening postfix and dovecot 2024-12-20 21:41:02 +08:00
Lu Wang 22700c13c7
system/boot: increase maximum buffer size
References: https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes
2024-12-20 16:45:17 +08:00
Lu Wang a75d3f9ea8
zones/rebmit.moe: add srv records for mail service
References: https://www.rfc-editor.org/rfc/rfc6186
2024-12-19 23:38:45 +08:00
Lu Wang 4177868f1c
services/mail: init postfix, dovecot and rspamd 2024-12-19 22:12:03 +08:00
Lu Wang ba323843c8
services/caddy: use caddy-l4 2024-12-19 15:14:46 +08:00
Lu Wang 8474837509
services/matrix: backup synapse media repo for now 2024-12-19 14:00:02 +08:00
Lu Wang 624323f07a
services/matrix: stop serving element-web 2024-12-19 00:52:12 +08:00
Lu Wang 7c19c23481
treewide: drop reisen-lax0 2024-12-19 00:13:47 +08:00
Lu Wang 742595fa65
services/matrix: init mautrix-telegram 2024-12-19 00:09:09 +08:00
Lu Wang 1e71d7fc3e
services/matrix: drop synapse-admin 2024-12-18 20:35:38 +08:00
Lu Wang 97136a9663
services/matrix: init heisenbridge 2024-12-18 20:17:57 +08:00
Lu Wang f3ea502179
services/matrix-synapse: init 2024-12-18 16:36:47 +08:00