5cc7ced859
dns: rework so that we branch to the LAN v.s. WAN results based on source IP of the query -- not interface.
...
this simplifies the UPnP forwards and the OVPN routing
2023-05-31 00:56:52 +00:00
4dc5378b3e
dns: give different results based on which port the request arrives from
...
WAN and VPN requests are served by local port 1053 and `wan.uninsane.org`.
LAN requests are served by port 53 and `servo.lan.uninsane.org`.
i'm not *super* fond of this. a recursive resolver of uninsane.org via the VPN will only ever get WAN addresses (broken).
we may prefer to do IP-based responses, maybe via the same Linux firewall rules that forward from VPN namespace to root namespace
2023-05-30 12:00:30 +00:00
c1ddddddc0
ports: hide behind services.sane.wan-ports
...
later i will use this to enable UPnP on relevant ports
2023-05-26 23:28:30 +00:00
5b80308074
servo: disable broken mx-discord-puppet
2023-05-26 21:04:54 +00:00
8cde4135b1
matrix: irc: libera: configure with sasl=false
2023-05-24 07:40:35 +00:00
8a28e347f5
matrix: bridge to irc.libera.chat
2023-05-19 10:47:41 +00:00
e0c2e8c149
lemmy: split the nginx config out into something that can be upstreamed later
...
(waiting for the nixosTests to pass before upstreaming)
2023-05-16 06:04:29 +00:00
95635be1d5
matrix: bridge to irc.oftc.net
2023-05-16 05:55:16 +00:00
fb427e55e8
secrets: define these by crawling the repo to decrease duplication
2023-05-14 09:50:01 +00:00
af42cbd575
servo: fix typo in nixserve secret config
2023-05-14 02:33:56 +00:00
318efe09e2
secrets: split desko.yaml into one-secret-per-file
2023-05-14 02:29:30 +00:00
5997283cef
lemmy: break pict-rs config into own unit & persist its data
2023-05-12 06:54:26 +00:00
d7bed3bec2
lemmy: remove debugging statements
2023-05-12 04:49:15 +00:00
079ab08642
lemmy: remove federation.debug
2023-05-12 04:47:10 +00:00
e34c9cc190
lemmy: enable proxyWebsockets instead of manually specifying upgrade logic
2023-05-12 04:46:38 +00:00
6ff2c8acae
lemmy: restrict the http_accept types i forward to the backend
...
it seems that forwarding `POST`s is the important part i was missing earlier
2023-05-12 03:05:26 +00:00
04e8e72ae3
lemmy: switch back to using nix-style proxyPass
2023-05-12 02:47:47 +00:00
5b33c85e75
gitea: link to config options
2023-05-12 02:35:46 +00:00
083d905f4c
lemmy: fix federation
...
now when i subscribe to a community, the request actually seems to go through.
this change probably does more than necessary, but it serves as a known-good config
2023-05-12 02:35:37 +00:00
ada8b75670
transmission: double upload BW to 600 kBps
2023-05-11 06:27:31 +00:00
b9afd1e340
lemmy: fixup websocket forwarding
...
able to create admin account and subscribe to remote communities.
haven't tested posting comments.
2023-05-10 08:24:52 +00:00
bfcbea5ca1
lemmy: fix the database connection
2023-05-09 10:05:14 +00:00
0376b15a2f
matrix: appservice-irc: connect to esper.net IRC
2023-05-09 08:01:26 +00:00
94a8c00a40
gitea: migrate config away from deprecated options
2023-05-05 22:33:59 +00:00
96eb427ea7
matrix: support larger uploads (100M)
2023-05-03 22:22:09 +00:00
96d113ffac
lemmy: bump to git version in attempt to debug failed launch
2023-04-30 00:54:08 +00:00
d06516a71b
servo: try to ship lemmy (it's failing with some DB migration stuff)
2023-04-28 02:02:39 +00:00
09a1d286d0
servo: enable komga, a comic/manga webapp
2023-04-21 07:15:05 +00:00
0662b06df6
servo: try to ship calibre (but i get runtime errors, so disable it)
2023-04-21 06:57:26 +00:00
b0a99da884
dovecot: if mail fails DKIM, deliver it to Junk
2023-04-20 14:25:59 +00:00
12fd7ebc41
email: split dovecot config out of postfix config
2023-04-20 09:43:39 +00:00
f4a04ff6ba
reorg: move postfix stuff into an email subdir
2023-04-20 09:24:20 +00:00
89e2a83067
postfix: toy with some spam protection (but don't actually enable it)
2023-04-20 09:17:25 +00:00
6af0d54e7b
matrix: re-enable signal bridge
2023-04-18 06:10:17 +00:00
099cd12bdd
matrix/irc.nix: sanitize quit messages
2023-04-18 00:58:15 +00:00
bf67def14a
matrix/irc.nix: MyAnonamouse: disable SASL auth
...
it's unclear if SASL auth *might* actually work -- just with some weird delays -- but non-SASL auth *definitely* works
2023-04-17 01:57:27 +00:00
4ff82f002b
matrix/irc.nix: bridge to MyAnonamouse
2023-04-16 13:13:36 +00:00
781a149542
matrix: re-enable IRC bridge
2023-04-16 00:32:04 +00:00
94ac4ec0e9
matrix-appservice-irc: correct the user id/gid
2023-04-15 06:58:13 +00:00
8db4498ae8
jellyfin: enable port forwarding and DLNA debugging
2023-03-31 12:42:31 +00:00
f89837f3aa
servo: re-enable jellyfin
2023-03-16 09:11:26 +00:00
4b41aa3718
postfix: group forwarded ports by host
2023-03-14 11:35:56 +00:00
71d6fe44a1
postfix: compact the TXT MX records
2023-03-14 11:35:34 +00:00
403b177a80
matrix: disable mautrix-signal (temporarily)
2023-03-11 00:02:30 +00:00
478002766e
trust-dns: fetch lan IP to listen on from config instead of repeating myself
2023-02-21 11:38:27 +00:00
58b219546b
ejabberd: reduce TURN port pool
2023-02-21 11:25:34 +00:00
499078e0f8
trust-dns: update the address we listen on
2023-02-21 11:25:16 +00:00
c0377ff1a0
dovecot: define Drafts and Trash folders
2023-01-31 08:22:20 +00:00
062ef20d05
dovecot: auto-create the "Sent" message box
2023-01-31 06:57:35 +00:00
33d7819619
trust-dns: add a "quiet" option and enable it
2023-01-25 08:18:29 +00:00
