javalsai
0fd9693941
nixos/security: add acme through dns challenge
...
few side refactors of this:
- no more `dns.domain`, it all must rely on `fqdn`, prevents
inconsistencies.
- also added an specific host `tuxcord-acmetest` that uses the key zone
for `nix.tuxcord.net` to test certificate pulling.
2026-05-03 20:36:49 -04:00
javalsai
88b724d927
nixos/services: make dns configuration easier
2026-05-03 20:36:49 -04:00
javalsai
e5a38b15ee
nixos/service: add dns (bind named server)
2026-05-03 20:36:49 -04:00
javalsai
dd7ad60710
nixos/services: add gitea server
Check / Nix flake (push) Failing after 9s
Lint / Nix expressions (push) Failing after 10s
2026-05-04 01:56:34 +02:00
javalsai
d7deaa187c
nixos/networking: add own fqdn to extraHosts
2026-05-04 01:56:34 +02:00
ErrorNoInternet
4704a887fa
nixos: separate openssh firewall port
2026-05-04 01:56:34 +02:00
ErrorNoInternet
500b17237e
treewide: separate ssh keys
Check / Nix flake (push) Failing after 39s
Lint / Nix expressions (push) Failing after 41s
2026-05-02 18:01:29 -04:00
javalsai
6cd9ae97ea
nixos/services/sshd: disable password and root login
2026-05-02 17:11:42 -04:00
ErrorNoInternet
463c3659fa
treewide: set allowUnfree for flake
2026-05-02 03:10:07 -04:00
ErrorNoInternet
066f4ef3fc
nixos: define basic options for vm output
2026-05-02 03:08:18 -04:00
ErrorNoInternet
e846acfbef
nixos: set ClientAliveInterval for sshd
2026-04-18 18:02:12 -04:00
ErrorNoInternet
803c65c033
nixos: set nix-daemon scheduling policies
2026-04-18 18:02:12 -04:00
ErrorNoInternet
75532a931c
treewide: initial commit
2026-04-18 17:41:09 -04:00