b3890b82dc
servo: http/https: expose to doof
2024-06-17 07:55:53 +00:00
7825ddc123
servo: split out a "bridgedWireguardNamespace" helper for configuring ovpns VPN
...
i can re-use this to forward traffic over doof
2024-06-17 07:20:23 +00:00
fce3436c88
servo: expose Milkbags to the internet :)
2024-04-08 06:55:09 +00:00
4d6d79cc81
servo: /var/lib/uninsane/media -> /var/media
2024-03-05 18:44:30 +00:00
c6ebcfe66e
servo: port legacy /var/lib users over to "method = bind" persistence
...
i may wittle these down in the future
2024-02-23 15:49:54 +00:00
e4123759f5
nginx: only auto-index /share
2023-12-19 00:12:27 +00:00
efb2815fa5
uninsane.org: simplify the /share routing (and generalize it to other subdirectories)
2023-12-18 06:03:49 +00:00
a7d3ac95aa
nginx: uninsane.org: redirect common feed URIs to the canonical feed
2023-12-10 16:31:30 +00:00
b50d723158
servo: nginx: remove "root" in uninsane share path
2023-12-03 15:53:29 +00:00
14739af1b9
servo: nginx: dont follow symlinks in the /share directory
2023-12-03 15:51:01 +00:00
b43a693a1e
nginx: render directory listings for uninsane.org/share
2023-12-03 09:00:45 +00:00
28d4a4b065
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
2023-11-08 15:33:15 +00:00
f2f721234d
nginx: link to docs
2023-10-22 04:12:34 +00:00
e6a989bc92
nginx/pleroma: correct an old todo
2023-07-15 00:08:05 +00:00
0a519eddb4
persist: allow persisting of individual files, not just directories
...
i actually do already, with ~/.ssh/id_ed25519 -- it works only as a fluke
2023-07-08 01:31:14 +00:00
287817056f
refactor: sane.services.wan-ports -> sane.ports
2023-05-31 04:25:39 +00:00
c1ddddddc0
ports: hide behind services.sane.wan-ports
...
later i will use this to enable UPnP on relevant ports
2023-05-26 23:28:30 +00:00
d13bcc49ab
refactor hosts directory, and move ssh keys out of modules/data
...
longer-term, i want hosts/by-name to define host-specific data
that's accessible via the other hosts (things like pubkeys).
also the secrets management needs some rethinking. there's really not
much point in me specifiying where *exactly* a secret comes from at its
use site. i should really be specifying secret store manifests; i.e.
"servo.yaml contains secrets X Y and Z", and leaving the rest up to
auto-computing.
2023-01-19 23:23:43 +00:00