|
|
b54be3998f
|
flake: migrate to agenix-rekey
|
2025-02-18 21:47:38 -05:00 |
|
|
|
eaf4f56ac0
|
flake: reformat with nixfmt
|
2025-01-28 20:33:04 -05:00 |
|
|
|
07b058160e
|
global/security: update fail2ban whitelist
|
2024-09-24 21:13:57 -04:00 |
|
|
|
cb2dfa481b
|
global/security: enable polkit
|
2024-07-05 22:00:35 -04:00 |
|
|
|
29b898d204
|
global/security: add inx.moe root certs
|
2024-06-28 11:44:03 -04:00 |
|
|
|
15b74e7fe0
|
global/security: only include microcode on x86_64
|
2024-06-23 22:16:20 -04:00 |
|
|
|
df67046cb8
|
global/security: move common config to global/common
|
2024-05-12 00:02:54 -04:00 |
|
|
|
1e67729be0
|
global/security: move ssh config to global/ssh
|
2024-05-12 00:01:53 -04:00 |
|
|
|
d0a05983e1
|
global/security: add smtp group for smtp password file
|
2024-05-09 02:34:41 -04:00 |
|
|
|
17d9520365
|
global/security: add common email/domain configuration
|
2024-05-08 03:40:28 -04:00 |
|
|
|
2a9fcb777d
|
flake: remove outdated/unnecessary credit commits
|
2024-04-28 19:20:00 -04:00 |
|
|
|
180bcfa3ff
|
global/security: replace ssh agent auth with passwordless sudo
|
2024-04-28 19:20:00 -04:00 |
|
|
|
001068b1f0
|
global/security: update Intel microcode
|
2024-04-28 19:20:00 -04:00 |
|
|
|
d784d4eee4
|
Infini-OPTIPLEX: refactor nginx config and use acme certs
|
2024-04-26 03:02:51 -04:00 |
|
|
|
5e56eaa90e
|
global/security: add global fail2ban options
|
2024-04-15 02:28:10 -04:00 |
|
|
|
3ed49dcd02
|
global/security: add rsync.net ssh host alias
|
2024-04-14 08:36:03 -04:00 |
|
|
|
d55fccdd3a
|
global/security: enable ssh GatewayPorts
|
2024-04-14 08:36:03 -04:00 |
|
|
|
c3da8351ec
|
global/security: split into force ssl and add ssl
|
2024-04-13 01:11:49 -04:00 |
|
|
|
e5eee00ec1
|
global/security: don't generate RSA host keys
|
2024-03-20 22:11:11 -04:00 |
|
|
|
fb073ae827
|
global/security: refactor SSH agent auth
|
2024-02-27 02:57:02 -05:00 |
|
|
|
567358aeff
|
global/security: set common nginx settings
|
2024-02-01 20:13:19 -05:00 |
|
|
|
6174326ae7
|
Infini-SERVER: pull vaultwarden into its own module
|
2024-01-30 16:30:04 -05:00 |
|
|
|
50debb5dec
|
flake: rewrite to use flake-parts
|
2023-07-28 15:30:10 -04:00 |
|
|
|
414f8b6030
|
global/security: enable restributable firmware globally
Also enable AMD microcode updates based on redistributable firmware
being enabled
|
2023-07-20 21:22:27 -04:00 |
|
|
|
018a0e99d7
|
nit: fix deprecations
|
2023-03-31 12:07:30 -04:00 |
|
|
|
a35b222dee
|
tweak(security): add email to acme settings
|
2023-03-31 11:59:36 -04:00 |
|
|
|
1f0035cddd
|
module: global & core -> global/*
|
2023-03-30 12:29:48 -04:00 |
|
