343c87b279
Mostly working postfix+dovecot2+ldap setup
...
/ dev-shell (push) Successful in 46s
/ rust-packages (push) Successful in 52s
/ check (push) Failing after 1m8s
/ terraform-providers (push) Successful in 1m15s
/ systems (push) Successful in 4m4s
Missing:
1. Figure out how to do some useful aliases for the mail
addresses. Either something like assigning @kas.agerlinskovgaard.dk
to kaare@agerlinskovgaard.dk or usual + aliases.
2. Oauth2 login is not working yet.
3. Need to be able to create accounts not handled by LDAP, such
that eg. forgejo can have an account to send mails from (maybe
also an account to receive mails?).
4. Once support in kanidm lands, need to look into application passwords
such that one doesn't have to use their regular posix password,
and maybe, ideally, doesn't need a posix password at all.
2025-07-29 11:27:09 +02:00
6a1aca24a9
Getting close to working ldap setup with postfix and dovecot
...
/ check (push) Failing after 1m44s
/ rust-packages (push) Successful in 2m34s
/ dev-shell (push) Successful in 2m17s
/ terraform-providers (push) Successful in 14m28s
/ systems (push) Successful in 38m13s
LDAP login works for IMAP, but postfix doesn't recognise
the mail addresses for the users.
2025-07-29 00:27:07 +02:00
cd8a0db1b6
Begin reverting back to simple-nixos-mailserver
...
/ dev-shell (push) Successful in 1m8s
/ check (push) Failing after 1m29s
/ systems (push) Failing after 33s
/ rust-packages (push) Successful in 3m40s
/ terraform-providers (push) Successful in 5m13s
It appears I can get app passwords with kanidm and ldap
so just going to a more stable, probably supported setup,
should be good.
2025-07-28 12:02:24 +02:00
c97b19c495
Begin attempting to configure stalwart
/ dev-shell (push) Successful in 1m50s
/ rust-packages (push) Successful in 11m58s
/ check (push) Failing after 1m16s
/ systems (push) Successful in 38m10s
/ terraform-providers (push) Successful in 15m4s
2025-07-27 00:39:55 +02:00
6e665a70bc
Fix kas.codes oauth setup
/ dev-shell (push) Successful in 36s
/ rust-packages (push) Successful in 41s
/ check (push) Failing after 1m1s
/ systems (push) Successful in 3m49s
/ terraform-providers (push) Successful in 37s
2025-07-26 21:10:54 +02:00
2064b4b006
Begin reworking some things around oauth apps
/ dev-shell (push) Successful in 38s
/ rust-packages (push) Successful in 44s
/ check (push) Failing after 1m3s
/ terraform-providers (push) Successful in 1m8s
/ systems (push) Successful in 3m56s
2025-07-26 20:48:50 +02:00
3d81e585db
Attempt to unify mailserver setup
...
/ dev-shell (push) Successful in 1m14s
/ rust-packages (push) Successful in 4m16s
/ check (push) Failing after 8m22s
/ terraform-providers (push) Successful in 8m47s
/ systems (push) Successful in 30m22s
Committing here as I want to try to use another
mailserver instead.
2025-07-26 11:22:07 +02:00
32e827f82c
Clean up some code and fix dkim txt record length
/ dev-shell (push) Successful in 32s
/ rust-packages (push) Successful in 40s
/ terraform-providers (push) Successful in 35s
/ check (push) Failing after 2m38s
/ systems (push) Successful in 20m41s
2025-07-23 23:40:47 +02:00
d842025c81
Support multiple dns zones per host
/ rust-packages (push) Successful in 4m2s
/ dev-shell (push) Successful in 1m3s
/ terraform-providers (push) Successful in 8m7s
/ check (push) Failing after 7m43s
/ systems (push) Successful in 30m24s
2025-07-23 23:28:15 +02:00
46375018e0
Add simple disk pressure alert
/ dev-shell (push) Successful in 32s
/ check (push) Successful in 1m14s
/ terraform-providers (push) Successful in 1m2s
/ systems (push) Successful in 3m44s
/ rust-packages (push) Successful in 38s
2025-07-22 15:35:44 +02:00
8e21df1764
Add some more alerting and fail2ban rules
/ dev-shell (push) Successful in 33s
/ rust-packages (push) Successful in 38s
/ terraform-providers (push) Successful in 1m1s
/ check (push) Successful in 2m7s
/ systems (push) Successful in 3m52s
2025-07-22 15:17:17 +02:00
e28f501316
Begin adding some alerts and add postgres exporter
/ dev-shell (push) Successful in 2m31s
/ rust-packages (push) Successful in 6m57s
/ check (push) Failing after 11m24s
/ terraform-providers (push) Successful in 14m45s
/ systems (push) Successful in 34m47s
2025-07-22 00:01:13 +02:00
0233431feb
Increase rate limit (triggered easily on grafana)
/ dev-shell (push) Successful in 30s
/ check (push) Successful in 1m10s
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 31s
/ systems (push) Successful in 3m44s
2025-07-20 23:43:40 +02:00
d5cca90a4d
Adjust some more nginx fail2ban
/ rust-packages (push) Successful in 37s
/ dev-shell (push) Successful in 30s
/ terraform-providers (push) Successful in 58s
/ check (push) Successful in 1m14s
/ systems (push) Successful in 3m41s
2025-07-20 23:35:05 +02:00
61741b5680
Apply req limits to fail2ban
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ terraform-providers (push) Successful in 31s
/ check (push) Successful in 1m11s
/ systems (push) Successful in 13m48s
2025-07-20 23:13:56 +02:00
c03a508586
Remove non helpful comments
/ dev-shell (push) Successful in 31s
/ rust-packages (push) Successful in 36s
/ check (push) Successful in 1m10s
/ terraform-providers (push) Successful in 31s
/ systems (push) Has been cancelled
2025-07-20 23:03:52 +02:00
9ddab7b706
Add some basic fail2ban setup of nginx
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Has been cancelled
/ terraform-providers (push) Has been cancelled
/ systems (push) Has been cancelled
2025-07-20 23:03:14 +02:00
95414d4380
Tweak nginx fail2ban
/ rust-packages (push) Successful in 38s
/ terraform-providers (push) Successful in 59s
/ check (push) Successful in 2m0s
/ dev-shell (push) Successful in 31s
/ systems (push) Has been cancelled
2025-07-20 22:55:21 +02:00
277f7dbb57
Work on nginx setup to get logs into loki
...
/ dev-shell (push) Successful in 59s
/ rust-packages (push) Successful in 3m17s
/ check (push) Failing after 4m35s
/ systems (push) Successful in 25m43s
/ terraform-providers (push) Successful in 5m44s
Also add default robots.txt file
2025-07-20 13:26:52 +02:00
b2f59a9c77
Make some notes on how to bring up servers
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 59s
/ systems (push) Successful in 3m33s
2025-07-19 23:03:40 +02:00
e7c73f98dd
Hardcode path to usermod
...
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 1m11s
/ terraform-providers (push) Successful in 58s
/ systems (push) Successful in 3m30s
Apparently adding dependency on `su` does not seem
to put usermod in path
2025-07-19 22:50:23 +02:00
ac1c6adc75
Attempt to fix some random bugs
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ check (push) Successful in 1m13s
/ terraform-providers (push) Successful in 1m1s
/ systems (push) Successful in 3m34s
2025-07-19 22:46:51 +02:00
293dbdab94
Change set unix user command to service
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 32s
/ check (push) Successful in 1m10s
/ systems (push) Successful in 3m33s
2025-07-19 22:41:55 +02:00
16cd4f241e
Fix another derp bug
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 58s
/ check (push) Successful in 1m14s
/ systems (push) Successful in 3m32s
2025-07-19 22:36:22 +02:00
567098b4a4
Fix bug and add utility to store unix password
/ dev-shell (push) Successful in 29s
/ rust-packages (push) Successful in 34s
/ terraform-providers (push) Successful in 30s
/ check (push) Successful in 1m10s
/ systems (push) Failing after 1m41s
2025-07-19 22:34:06 +02:00
9c828ea0e4
Clarify some code
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m36s
/ terraform-providers (push) Successful in 30s
2025-07-19 22:07:07 +02:00
daf5aac32d
Add git to khs base
/ dev-shell (push) Successful in 28s
/ rust-packages (push) Successful in 35s
/ check (push) Failing after 54s
/ terraform-providers (push) Successful in 1m0s
/ systems (push) Failing after 1m37s
2025-07-19 22:05:02 +02:00
8c3d372586
Support setting khs unix user password from vault
/ rust-packages (push) Successful in 36s
/ terraform-providers (push) Successful in 57s
/ dev-shell (push) Successful in 29s
/ check (push) Failing after 52s
/ systems (push) Failing after 1m38s
2025-07-19 22:04:04 +02:00
57c4fd3d35
Begin adding support for setting unix password for users
2025-07-19 21:47:52 +02:00
a7339120a0
Fix double usage of same secret file
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 35s
/ check (push) Successful in 2m5s
/ systems (push) Successful in 3m31s
/ terraform-providers (push) Successful in 30s
2025-07-19 19:43:16 +02:00
a3eaca7fb0
Add git to nixos upgrade script
/ dev-shell (push) Successful in 30s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 56s
/ check (push) Failing after 2m0s
/ systems (push) Successful in 3m32s
2025-07-19 12:05:11 +02:00
9bd9eb328b
Get kas.codes minimally functioning
/ systems (push) Successful in 31m26s
/ dev-shell (push) Successful in 1m48s
/ rust-packages (push) Successful in 4m13s
/ check (push) Failing after 5m8s
/ terraform-providers (push) Successful in 11m14s
2025-07-18 23:42:46 +02:00
dec0048a7b
Begin preparing kas.codes domain
/ check (push) Waiting to run
/ dev-shell (push) Waiting to run
/ rust-packages (push) Waiting to run
/ terraform-providers (push) Waiting to run
/ systems (push) Waiting to run
2025-07-18 22:58:35 +02:00
eff84d05da
Render secrets more often
/ rust-packages (push) Successful in 36s
/ dev-shell (push) Successful in 28s
/ terraform-providers (push) Successful in 59s
/ check (push) Successful in 2m3s
/ systems (push) Successful in 3m47s
2025-07-18 13:56:21 +02:00
1f7139f793
Move monitoring.kaareskovgaard.net to new openbao setup
/ dev-shell (push) Successful in 1m52s
/ rust-packages (push) Successful in 4m3s
/ check (push) Failing after 4m59s
/ terraform-providers (push) Successful in 11m1s
/ systems (push) Successful in 31m7s
2025-07-18 00:18:26 +02:00
905b1096ac
Fix some notes
/ check (push) Failing after 2m22s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 33s
/ systems (push) Successful in 18m35s
/ terraform-providers (push) Successful in 2m23s
2025-07-17 01:28:58 +02:00
f3175b9b03
Begin setting up authentication and secrets engine
/ dev-shell (push) Successful in 1m9s
/ rust-packages (push) Successful in 4m36s
/ check (push) Failing after 5m57s
/ systems (push) Successful in 27m33s
/ terraform-providers (push) Successful in 12m41s
2025-07-17 01:20:19 +02:00
81551dd791
Reenable systemd collectors
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Failing after 5m0s
2025-07-15 23:02:07 +02:00
005ac30c21
Fix prometheus/loki cache keys not writing to same file
/ dev-shell (push) Successful in 26s
/ check (push) Successful in 1m19s
/ rust-packages (push) Successful in 33s
/ terraform-providers (push) Successful in 56s
/ systems (push) Has been cancelled
2025-07-15 22:59:37 +02:00
24c28283d4
Disable systemd metrics to see if it helps alloy not fail
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 31s
/ terraform-providers (push) Successful in 27s
/ check (push) Successful in 1m19s
/ systems (push) Has been cancelled
2025-07-15 22:51:54 +02:00
8fb47705f4
Add time zone to khs-base and collect systemd metrics
/ dev-shell (push) Successful in 26s
/ rust-packages (push) Successful in 37s
/ terraform-providers (push) Successful in 1m2s
/ check (push) Successful in 1m24s
/ systems (push) Failing after 5m5s
2025-07-15 22:36:00 +02:00
0cb6ecb1f6
Prepare some post provisioning stuff
/ dev-shell (push) Successful in 2m50s
/ rust-packages (push) Successful in 2m57s
/ systems (push) Failing after 7m45s
/ terraform-providers (push) Successful in 1m6s
/ check (push) Successful in 5m17s
2025-07-15 17:24:04 +02:00
11bb2af2bb
Remove desktop.qcow2 from git
...
/ systems (push) Successful in 1h29m35s
/ dev-shell (push) Successful in 25s
/ rust-packages (push) Successful in 32s
/ terraform-providers (push) Successful in 55s
/ check (push) Successful in 1m20s
Former-commit-id: de8ddee60c702f6877dca54180c22ec6574ee13b
2025-07-15 08:43:55 +02:00
749045904a
Add to list of systems built
...
Former-commit-id: fbfbf97fc3
2025-07-15 08:33:57 +02:00
7e7ffbb4c4
Build authentik as well
...
Former-commit-id: 7cad695983
2025-07-15 08:30:57 +02:00
3e4db99246
Make openstack servers be a server
...
Former-commit-id: b83cfce0af
2025-07-15 08:25:43 +02:00
3c3e33b075
Restructure conditionals on desktop in homes
...
Former-commit-id: b0c972f5b3
2025-07-15 08:22:59 +02:00
a5384c8105
Fix wrong config path
...
Former-commit-id: 80af3c16e5
2025-07-15 08:16:39 +02:00
0b124838b2
More fixes
...
Former-commit-id: 5826c78a68
2025-07-15 08:13:26 +02:00
fee2017fd4
Fix some minor issues
...
Former-commit-id: f8a0434e2b
2025-07-14 23:41:25 +02:00
