Commit Graph

1640 Commits

Author SHA1 Message Date
6dbc01e089 update 2026-03-03 14:31:06 -05:00
3ccb31f6b4 update 2026-03-03 14:31:06 -05:00
26e93112ca mreow: removed commented out config 2026-03-03 14:31:05 -05:00
12b681c8f2 cleanup 2026-03-03 14:31:05 -05:00
61863770fd mreow: remove unneeded niri-session.desktop file creation 2026-03-03 14:31:05 -05:00
f7a0eef88f cleanup minecraft test 2026-03-03 14:31:05 -05:00
09414f17a3 mreow: disable custom vt used for greetd 2026-03-03 14:31:04 -05:00
d16c081c51 wg: don't hardcode namespaceAddress 2026-03-03 14:31:04 -05:00
000d8fdf12 mreow: enable framework kmod again 2026-03-03 14:31:04 -05:00
4de717a20d Revert "minecraft: fail2ban"
This reverts commit a23b3d8c5f1786204e3de18c3b8ba579a0e0e693.
2026-03-03 14:31:03 -05:00
b2e6ae7126 mreow: re-enable nixos-hardware's audioEnchancement for fw13 2026-03-03 14:31:03 -05:00
a184dcee5b minecraft: fail2ban 2026-03-03 14:31:03 -05:00
f6ca87d182 update 2026-03-03 14:31:03 -05:00
c9fc1b028e hostPlatform -> targetPlatform 2026-03-03 14:31:02 -05:00
fc38b5df20 opencode: nix remove --rebuild usage 2026-03-03 14:31:02 -05:00
482190519b fix squaremap 2026-03-03 14:31:02 -05:00
f7b65fd822 update 2026-03-03 14:31:02 -05:00
ed6fc66fde update 2026-03-03 14:31:01 -05:00
9a670104b1 cleanup 2026-03-03 14:31:01 -05:00
93c8f4a244 flake: impermanence nixpkgs follow nixpkgs 2026-03-03 14:31:01 -05:00
8c2e513fd9 fix amdgpu ppfeaturemask 2026-03-03 14:31:01 -05:00
c6c96528a9 jellyfin-qbittorrent-monitor: don't use mock qbittorrent 2026-03-03 14:31:00 -05:00
6fa94c3c35 opencode: nix specify git add usage 2026-03-03 14:31:00 -05:00
9874c13052 jellyfin-qbittorrent-monitor: fix mock qbittorrent 2026-03-03 14:31:00 -05:00
88f103cb97 update 2026-03-03 14:31:00 -05:00
a6a9196137 fmt 2026-03-03 14:30:59 -05:00
6da17c82f4 update 2026-03-03 14:30:59 -05:00
bd0c7cde6d tests: fix all fail2ban NixOS VM tests
- Add explicit iptables banaction in security.nix for test compatibility
- Force IPv4 in all curl requests to prevent IPv4/IPv6 mismatch issues
- Fix caddy test: use basic_auth directive (not basicauth)
- Override service ports in tests to match direct connections (not via Caddy)
- Vaultwarden: override ROCKET_ADDRESS and ROCKET_LOG for external access
- Immich: increase VM memory to 4GB for stability
- Jellyfin: create placeholder log file and reload fail2ban after startup
- Add tests.nix entries for all 6 fail2ban tests

All tests now pass: ssh, caddy, gitea, vaultwarden, immich, jellyfin
2026-03-03 14:30:59 -05:00
087d06002b update 2026-03-03 14:30:59 -05:00
323a267c5a fail2ban: implement for jellyfin 2026-03-03 14:30:58 -05:00
175b2f6287 opencode: use only free models + stuff 2026-03-03 14:30:58 -05:00
8b78320cbb fail2ban: implement for immich 2026-03-03 14:30:58 -05:00
02d3a721f6 Revert "cachyos + cleanup"
This reverts commit 66b4931d083f0cc2adebf15dfdd3ccdc1bed5c4b.
2026-03-03 14:30:58 -05:00
9b891b46a6 fail2ban: implement for gitea 2026-03-03 14:30:57 -05:00
5c30ce8fd9 cachyos + cleanup 2026-03-03 14:30:57 -05:00
bacdb42a37 fail2ban: implement for bitwarden 2026-03-03 14:30:57 -05:00
6b53f29ae0 update 2026-03-03 14:30:57 -05:00
2ddde076fa fail2ban: implement for caddy basic auth 2026-03-03 14:30:56 -05:00
7b53591724 update 2026-03-03 14:30:56 -05:00
0e1aa6fe0e nit: move fail2ban to security module 2026-03-03 14:30:56 -05:00
a876c4d0a9 Revert "nixpkgs: patching test"
This reverts commit 6204949bdcd106a328fa9fccd779aa99a4753713.
2026-03-03 14:30:56 -05:00
b2a0d3216c ssh: add fail2ban 2026-03-03 14:30:55 -05:00
3bcb62f815 nixpkgs: patching test 2026-03-03 14:30:55 -05:00
dc71dbc188 jellyfin-qbittorrent-monitor: handle qbittorrent going down state 2026-03-03 14:30:55 -05:00
a6d0fbf4b8 nix: re-enable optimise store 2026-03-03 14:30:55 -05:00
3db2728dbe security things 2026-03-03 14:30:54 -05:00
44700240a0 update 2026-03-03 14:30:54 -05:00
aa1f24f573 update 2026-03-03 14:30:54 -05:00
189d74e043 update 2026-03-03 14:30:54 -05:00
212e3b5c7b update 2026-03-03 14:30:53 -05:00