Commit Graph

567 Commits

Author SHA1 Message Date
f6be10e019 update 2026-03-03 14:31:09 -05:00
c008aee5ea update 2026-03-03 14:31:09 -05:00
a5c14ce306 fail2ban: ignoreip from local network 2026-03-03 14:31:08 -05:00
f106871fa2 update 2026-03-03 14:31:08 -05:00
78ed353a0f xmrig: 12 threads 2026-03-03 14:31:07 -05:00
f6dffc3718 xmrig: 1gb pages 2026-03-03 14:31:07 -05:00
66cfc65099 xmrig 2026-03-03 14:31:06 -05:00
3ccb31f6b4 update 2026-03-03 14:31:06 -05:00
12b681c8f2 cleanup 2026-03-03 14:31:05 -05:00
f7a0eef88f cleanup minecraft test 2026-03-03 14:31:05 -05:00
d16c081c51 wg: don't hardcode namespaceAddress 2026-03-03 14:31:04 -05:00
4de717a20d Revert "minecraft: fail2ban"
This reverts commit a23b3d8c5f.
2026-03-03 14:31:03 -05:00
a184dcee5b minecraft: fail2ban 2026-03-03 14:31:03 -05:00
c9fc1b028e hostPlatform -> targetPlatform 2026-03-03 14:31:02 -05:00
482190519b fix squaremap 2026-03-03 14:31:02 -05:00
ed6fc66fde update 2026-03-03 14:31:01 -05:00
93c8f4a244 flake: impermanence nixpkgs follow nixpkgs 2026-03-03 14:31:01 -05:00
c6c96528a9 jellyfin-qbittorrent-monitor: don't use mock qbittorrent 2026-03-03 14:31:00 -05:00
9874c13052 jellyfin-qbittorrent-monitor: fix mock qbittorrent 2026-03-03 14:31:00 -05:00
a6a9196137 fmt 2026-03-03 14:30:59 -05:00
bd0c7cde6d tests: fix all fail2ban NixOS VM tests
- Add explicit iptables banaction in security.nix for test compatibility
- Force IPv4 in all curl requests to prevent IPv4/IPv6 mismatch issues
- Fix caddy test: use basic_auth directive (not basicauth)
- Override service ports in tests to match direct connections (not via Caddy)
- Vaultwarden: override ROCKET_ADDRESS and ROCKET_LOG for external access
- Immich: increase VM memory to 4GB for stability
- Jellyfin: create placeholder log file and reload fail2ban after startup
- Add tests.nix entries for all 6 fail2ban tests

All tests now pass: ssh, caddy, gitea, vaultwarden, immich, jellyfin
2026-03-03 14:30:59 -05:00
323a267c5a fail2ban: implement for jellyfin 2026-03-03 14:30:58 -05:00
8b78320cbb fail2ban: implement for immich 2026-03-03 14:30:58 -05:00
9b891b46a6 fail2ban: implement for gitea 2026-03-03 14:30:57 -05:00
bacdb42a37 fail2ban: implement for bitwarden 2026-03-03 14:30:57 -05:00
2ddde076fa fail2ban: implement for caddy basic auth 2026-03-03 14:30:56 -05:00
0e1aa6fe0e nit: move fail2ban to security module 2026-03-03 14:30:56 -05:00
b2a0d3216c ssh: add fail2ban 2026-03-03 14:30:55 -05:00
dc71dbc188 jellyfin-qbittorrent-monitor: handle qbittorrent going down state 2026-03-03 14:30:55 -05:00
3db2728dbe security things 2026-03-03 14:30:54 -05:00
aa1f24f573 update 2026-03-03 14:30:54 -05:00
212e3b5c7b update 2026-03-03 14:30:53 -05:00
1070e8c54d monero: move back to hdds 2026-03-03 14:30:53 -05:00
1144b94259 syncthing 2026-03-03 14:30:53 -05:00
0c677db3e0 jellyfin-qbittorrent-monitor: don't mock out jellyfin for testing 2026-03-03 14:30:52 -05:00
ecfc282526 rework qbittorrent jellyfin monitor test 2026-03-03 14:30:52 -05:00
5fe233e05e impermanence: fix /etc/zfs cache 2026-03-03 14:30:51 -05:00
65b49488d1 impermanence: fix persistant ssh host keys 2026-03-03 14:30:51 -05:00
6f97c73cf6 update 2026-03-03 14:30:50 -05:00
3552642a3c update webpage 2026-03-03 14:30:50 -05:00
da58597889 fix pkgs.system deprecation 2026-03-03 14:30:49 -05:00
9a27557121 nixfmt-rfc-style -> nixfmt-tree 2026-03-03 14:30:48 -05:00
5800a9cde0 update 2026-03-03 14:30:48 -05:00
165532bae3 nit: cleanup imports 2026-03-03 14:30:47 -05:00
5b6ad32f63 ytbn: use own nixpkgs 2026-03-03 14:30:47 -05:00
d7a8e25811 impermanence: fix home directory declaration 2026-03-03 14:30:46 -05:00
6f0bc05aea update 2026-03-03 14:30:46 -05:00
b8489fab61 cleanup flake deps 2026-03-03 14:30:45 -05:00
bcf6df238c vaapiVdpau -> libva-vdpau-driver 2026-03-03 14:30:45 -05:00
e2529aadc3 fully remove llama-cpp 2026-03-03 14:30:44 -05:00