|
|
33efbeda8a
|
link manpages into all linkIntoOwnPackage users
|
2024-08-01 17:43:58 +00:00 |
|
|
|
8206fb0519
|
linkIntoOwnPackage: place man/doc into separate outputs
|
2024-08-01 17:11:24 +00:00 |
|
|
|
2687286489
|
servo: nginx: switch to mainline zlib to silence syslog warnings
|
2024-08-01 01:25:16 +00:00 |
|
|
|
d5e52e21f7
|
sane-stop-all-servo: stop ntfy and trust-dns-doof services
|
2024-07-31 23:40:51 +00:00 |
|
|
|
367fc24aa8
|
nixpkgs: full_index=1: actually apply to all PR urls -- not just nixpkgs commits
|
2024-07-31 20:59:07 +00:00 |
|
|
|
bf45206d1a
|
nixpkgs: use full_index=1 when fetching patches, for stable hashes
|
2024-07-31 20:52:38 +00:00 |
|
|
|
397b2ae2ea
|
nixpkgs: update hashes
|
2024-07-30 22:05:01 +00:00 |
|
|
|
f0ebb305ec
|
nixpkgs: update hashes
though it's probably fetchpatch2 just being stupid again and i'll revert
|
2024-07-30 21:58:01 +00:00 |
|
|
|
e629d2d999
|
rsync-net: harden systemd service, and dodge the "pasta doesnt support root" bug
|
2024-07-30 21:54:25 +00:00 |
|
|
|
9b2601e450
|
cross: fix texinfo (used for info command)
|
2024-07-30 16:23:06 +00:00 |
|
|
|
a20c13fffe
|
firefox-extensions.ublacklist: 8.9.1 -> 8.9.2
|
2024-07-30 15:50:04 +00:00 |
|
|
|
20a2d8dc1c
|
uassets: 2024-07-28 -> 2024-07-29
|
2024-07-30 15:50:04 +00:00 |
|
|
|
297bf7e090
|
syshud: 2024-07-21 -> 2024-07-29
|
2024-07-30 15:50:04 +00:00 |
|
|
|
ed024d081e
|
nixpkgs-wayland: 2024-07-27 -> 2024-07-28
|
2024-07-30 15:50:04 +00:00 |
|
|
|
4ddd4191bc
|
nixpkgs: 2024-07-28 -> 2024-07-29
|
2024-07-30 15:50:04 +00:00 |
|
|
|
32ef63028b
|
sane-reclaim-disk-space: fix quote typo
|
2024-07-30 15:32:35 +00:00 |
|
|
|
70bd001171
|
servo: bitcoind: harden systemd service
|
2024-07-30 13:12:27 +00:00 |
|
|
|
b53f376d70
|
servo: clightning: tighten sandboxing for bitcoin-cli interaction
|
2024-07-30 12:41:33 +00:00 |
|
|
|
621c147483
|
clightning: remove /var/lib/bitcond-mainnet from the service paths -- again
|
2024-07-30 11:17:10 +00:00 |
|
|
|
841076fd9e
|
clightning: move /var/lib/bitcoind-mainnet from ReadWritePaths -> ReadOnlyPaths
i think i can go further, remote it altogether
|
2024-07-29 23:19:26 +00:00 |
|
|
|
80492e902b
|
inotify watches: bump 1M -> 4M
i'm hoping this will reduce errors on servo seen in system services,
about exhausing "disk space" (file handle space)
|
2024-07-29 23:19:26 +00:00 |
|
|
|
f058fe0be6
|
servo: lemmy: sandbox
|
2024-07-29 23:19:26 +00:00 |
|
|
|
8fde3dea77
|
servo: pleroma: fix service hardening
|
2024-07-29 23:19:26 +00:00 |
|
|
|
ac9238a7f0
|
servo: assorted: plead with shitty AI companies to not bring my server to its knees by scraping all of the Linux source code
i thought AI was supposed to be smart
|
2024-07-29 19:19:32 +00:00 |
|
|
|
45412e5042
|
common/fs: ftp auto-remounting in a way which doesnt use .service files
|
2024-07-29 15:44:54 +00:00 |
|
|
|
d76d50f1c4
|
common/fs: /mnt/servo/* ftp auto/re-mounting in a way which does better rate limiting
|
2024-07-29 07:11:52 +00:00 |
|
|
|
f1c76ada43
|
WIP: common/fs: simpler /mnt/servo/* ftp auto/re-mounting
|
2024-07-29 03:44:10 +00:00 |
|
|
|
9dbd85ba08
|
servo: slskd: remove the hardening options until i can debug
|
2024-07-29 03:42:52 +00:00 |
|
|
|
2c707c3acd
|
servo: lemmy/lemmy-ui: harden the service with a syscall filter
|
2024-07-29 03:42:52 +00:00 |
|
|
|
0fae963d90
|
servo: lemmy: harden the backend systemd service
|
2024-07-29 03:42:52 +00:00 |
|
|
|
90df178c35
|
servo: slskd: harden (partially)
|
2024-07-29 03:42:52 +00:00 |
|
|
|
dc053149d0
|
servo: lemmy/lemmy-ui: harden
|
2024-07-29 03:42:52 +00:00 |
|
|
|
bce81d0487
|
servo: pleroma: harden
|
2024-07-29 03:42:52 +00:00 |
|
|
|
a8eba4df4d
|
servo: jackett: harden further
|
2024-07-29 03:42:52 +00:00 |
|
|
|
1bb36b74c2
|
scripts/check-uninsane: check that servo bitcoind is online
|
2024-07-29 03:42:52 +00:00 |
|
|
|
e21910a1f7
|
servo: disable unused i2p, monero services
|
2024-07-29 03:42:52 +00:00 |
|
|
|
4b30036973
|
servo: bitcoind: harden
|
2024-07-29 03:42:52 +00:00 |
|
|
|
ea5919ab6b
|
servo: jackett: harden
|
2024-07-29 03:42:52 +00:00 |
|
|
|
43232ff569
|
kiwix-serve: harden
|
2024-07-29 03:42:52 +00:00 |
|
|
|
6a9fd04437
|
bitcoin-cli: split into own file, and fix broken path to config file when running as user
|
2024-07-29 03:42:52 +00:00 |
|
|
|
dc2d46b9c0
|
servo: cryptocurrencies: get clightning back into a state where i can see its working
|
2024-07-29 03:42:52 +00:00 |
|
|
|
666744bda3
|
bitcoin-cli,lightning-cli: ship as own package instead of shipping the whole daemon
|
2024-07-29 03:42:52 +00:00 |
|
|
|
ba09fbeec9
|
bitcoind: fix sandboxing
|
2024-07-29 03:42:52 +00:00 |
|
|
|
916ecc30d1
|
scripts/deploy: fix --reboot flag
|
2024-07-29 03:42:52 +00:00 |
|
|
|
1536a60a3d
|
firefox-extensions.ether-metamask: attributions-v11.16.15 -> 11.16.16
|
2024-07-29 03:42:52 +00:00 |
|
|
|
b7418afede
|
uassets: 2024-07-22 -> 2024-07-28
|
2024-07-29 03:42:52 +00:00 |
|
|
|
82a0bf3212
|
sops-nix: 2024-07-21 -> 2024-07-27
|
2024-07-29 03:42:52 +00:00 |
|
|
|
cb79224c7a
|
nixpkgs-wayland: 2024-07-22 -> 2024-07-27
|
2024-07-29 03:42:52 +00:00 |
|
|
|
b850e25f5b
|
nixpkgs: 2024-07-24 -> 2024-07-28
|
2024-07-29 03:42:52 +00:00 |
|
|
|
8f0f7ef333
|
cross: fix rsyslog compilation
|
2024-07-29 03:42:52 +00:00 |
|
