Commit graph

57 commits

Author SHA1 Message Date
59e6d798b0
oops
Some checks are pending
/ deploy (push) Has started running
2026-03-04 05:41:01 +02:00
bb0821306e
nginx add brotli module
Some checks are pending
/ deploy (push) Has started running
2026-03-04 05:23:43 +02:00
754db685e5
moarrr nginx hardening
Some checks are pending
/ deploy (push) Has started running
2026-03-04 05:16:49 +02:00
30057712d2
nginx lax CSP
All checks were successful
/ deploy (push) Successful in 31s
2026-03-04 04:20:44 +02:00
d5fc3b8852
remove upgrade-insecure-requests csp
All checks were successful
/ deploy (push) Successful in 32s
2026-03-04 04:03:03 +02:00
b9b3a64a8e
csp check
All checks were successful
/ deploy (push) Successful in 32s
2026-03-04 03:58:40 +02:00
f3e3fd8e2b
nginx use headers-more module
All checks were successful
/ deploy (push) Successful in 51s
2026-03-04 03:49:02 +02:00
8bfe367ff4
harden nginx tryx2
Some checks failed
/ deploy (push) Failing after 21s
2026-03-04 03:24:06 +02:00
72340afbfa
enable mail tlsrpt
All checks were successful
/ deploy (push) Successful in 34s
2026-03-04 02:43:11 +02:00
87b4e42f90
domain email aliases 2026-03-04 01:48:29 +02:00
15f2939cdc
searxng: remove tor proxy (way too slow)
All checks were successful
/ deploy (push) Successful in 54s
2026-02-14 07:53:30 +02:00
e10a74d2ba
autoindex builds/
Some checks failed
/ deploy (push) Has been cancelled
2026-02-10 19:34:42 +02:00
413f7dd102
add aur subdomain
All checks were successful
/ deploy (push) Successful in 53s
2026-02-10 19:26:51 +02:00
c87062a457
increase request timeout for searx
All checks were successful
/ deploy (push) Successful in 29s
2026-02-07 19:32:59 +02:00
1ee92fda8d
php-fpm for tor.toufy.me
All checks were successful
/ deploy (push) Successful in 30s
2026-02-05 21:28:29 +02:00
e068960f5d
enable php-fpm
All checks were successful
/ deploy (push) Successful in 28s
2026-02-05 21:21:35 +02:00
03464d2756
increase snowflake capacity, add tor subdomain
All checks were successful
/ deploy (push) Successful in 31s
2026-02-05 20:52:49 +02:00
25e91078bb
fix ORPort (ipv6 in brackets)
All checks were successful
/ deploy (push) Successful in 25s
2026-02-05 07:07:27 +02:00
65d2fab168
tor add ipv6 ORPort
Some checks failed
/ deploy (push) Failing after 57s
2026-02-05 07:03:27 +02:00
d3c2953655
ipv6 default route address
All checks were successful
/ deploy (push) Successful in 21s
2026-02-05 06:47:46 +02:00
7d94ce0f7b
set ipv6 default route
Some checks failed
/ deploy (push) Failing after 9s
2026-02-05 06:44:27 +02:00
0b83ce58aa
ipv6 fix
All checks were successful
/ deploy (push) Successful in 39s
2026-02-05 06:32:18 +02:00
66d408e6ee
add metrics to snowflake (prepare for embedded proxy subdomain), enable ipv6 (prepare for tor ipv6 support)
Some checks failed
/ deploy (push) Failing after 9s
2026-02-05 06:29:09 +02:00
2b305df53a
search: proxy stable, add big some brother engines 2026-02-05 04:43:47 +02:00
41c4dc36c8
+ is left associative
All checks were successful
/ deploy (push) Successful in 21s
2026-01-30 07:50:46 +02:00
250eea0c18
add monitoring
Some checks failed
/ deploy (push) Failing after 11s
2026-01-30 07:43:34 +02:00
80c49ec8a5
oops
All checks were successful
/ deploy (push) Successful in 26s
2026-01-30 03:46:26 +02:00
f70fcaed59
search: disable some engines that deny tor
All checks were successful
/ deploy (push) Successful in 29s
2026-01-29 23:00:55 +02:00
d4f4c543b0
searx: request_timeout takes double, but extra_proxy_timeout only takes int :)))
All checks were successful
/ deploy (push) Successful in 21s
2026-01-29 22:55:23 +02:00
7cbdddc762
search: fix outgoing proxies
Some checks failed
/ deploy (push) Failing after 24s
2026-01-29 22:34:38 +02:00
49e076a676
search: tor proxy + hide disabled engines
Some checks failed
/ deploy (push) Failing after 25s
2026-01-29 22:16:30 +02:00
5e854a779b
fix domain name
All checks were successful
/ deploy (push) Successful in 33s
2026-01-29 21:49:53 +02:00
0fefd6137a
config changes
Some checks failed
/ deploy (push) Failing after 8s
- network: add tor relay + snowflake proxy
- email: regex alias for admin
- search: enable some additional engines
2026-01-29 21:45:04 +02:00
f9a39222be
fail2ban: use formula instead of multipliers
All checks were successful
/ deploy (push) Successful in 30s
2026-01-29 17:52:56 +02:00
1d717b862e
add fail2ban config
Some checks failed
/ deploy (push) Failing after 8s
2026-01-29 17:41:53 +02:00
3adab363e0
add dmarc@toufy.me for RUA and RUF data
All checks were successful
/ deploy (push) Successful in 32s
2026-01-29 17:04:27 +02:00
bb4cf44075
catchall fix
All checks were successful
/ deploy (push) Successful in 48s
2026-01-29 01:34:13 +02:00
f95138115d
add sops mail/root owner
All checks were successful
/ deploy (push) Successful in 29s
2026-01-29 01:16:52 +02:00
418ebe3710
catchall email + root account
Some checks failed
/ deploy (push) Failing after 8s
2026-01-29 01:12:45 +02:00
742b5150ce
add radicale htpasswd file manually
All checks were successful
/ deploy (push) Successful in 25s
2026-01-28 19:35:01 +02:00
99540b98ac
fuck nginx.
Some checks failed
/ deploy (push) Failing after 50s
2026-01-28 19:16:24 +02:00
fda1e1845f
radicale: using hashedPasswordFile
Some checks failed
/ deploy (push) Failing after 18s
2026-01-28 19:12:04 +02:00
31417b97a7
mail: add roundcube + radicale, enable virus scanning, upgrade passwords to bcrypt
Some checks failed
/ deploy (push) Failing after 9s
2026-01-28 18:52:48 +02:00
5ae4e9c876
- remove system.autoUpgrade (using forgejo workflow weekly run instead)
Some checks failed
/ deploy (push) Failing after 28s
- garbage collect after switch
2026-01-26 23:53:53 +02:00
4482f2a285
prevent killing forgejo runners on nixos-rebuild switch
All checks were successful
/ deploy (push) Successful in 21s
2026-01-26 20:46:06 +02:00
a6a0cc35b4
add archlinux runner
Some checks failed
/ deploy (push) Failing after 15s
2026-01-26 19:30:08 +02:00
4010d4932b
remove default-src directive
All checks were successful
/ deploy (push) Successful in 30s
2026-01-15 02:29:41 +02:00
e230ba3da0
more flexible CSP for forgejo
All checks were successful
/ deploy (push) Successful in 30s
2026-01-15 02:26:50 +02:00
b8664c812e
oops xD
All checks were successful
/ deploy (push) Successful in 26s
2026-01-15 02:15:44 +02:00
1e5a83c5f5
nginx 'merge' doesn't actually merge :)
Some checks failed
/ deploy (push) Failing after 12m57s
2026-01-15 01:40:19 +02:00