Commit graph

84 commits

Author SHA1 Message Date
e286f92763
update rabbi gerzi 2026-07-06 22:10:35 +03:00
f897b53190
update rabbi gerzi 2026-07-04 21:24:31 +03:00
f5b9fdb811
update rabbi gerzi 2026-07-03 15:04:35 +03:00
e844362c92
update rabbi gerzi 2026-07-02 16:57:02 +03:00
247d526497
update rabbi gerzi 2026-07-02 16:48:22 +03:00
acca6baee7
update rabbi gerzi 2026-07-02 16:37:42 +03:00
be6cc669bd
Merge branch 'feature/rabbi-gerzi' 2026-07-02 16:23:24 +03:00
d7d396c6bd
add rabbi gerzi to flake lock 2026-07-02 16:23:09 +03:00
005072fcaa
add rabbi gerzi secrets 2026-07-02 16:22:55 +03:00
bf009cbcdd
configure rabbi gerzi 2026-07-02 11:51:07 +03:00
4b043686fe
set backup time to 7:15 Israel Time 2026-06-12 11:29:31 +03:00
983778964f
add borg backup for discourse 2026-06-12 11:20:41 +03:00
88f17bc21c
move borg secrets to its own file 2026-06-12 11:20:34 +03:00
c590ff251a
add borg recovery details 2026-06-11 22:35:50 +03:00
14176fed58
add borgbackup to forgejo 2026-06-11 21:58:04 +03:00
2107cc6aef
set proxy settings to false in attempt to remove double host headers 2026-06-03 20:57:28 +03:00
d54bba4c59
update forgejo server settings 2026-06-03 20:08:07 +03:00
66206fa64a
update emails for torahimderecheretz 2026-06-03 19:18:53 +03:00
49b66f764f
add discourse config to nixos config 2026-06-03 11:26:21 +03:00
e401d1040f
add mail settings for discourse 2026-06-03 11:24:43 +03:00
b6c309a2b3
adjust secrets permissions and remove db password 2026-06-03 10:52:01 +03:00
3bc76350ec
update home manager submodule 2026-06-03 08:44:03 +03:00
21e2d38ea4
init discourse config
includes admin, database, hostname, and secrets.
2026-06-03 08:43:20 +03:00
Yisroel Baum
52bacab3e6
update resume 2026-05-18 15:22:21 +03:00
Yisroel Baum
96693d52da
update home manager 2026-05-18 15:06:18 +03:00
Yisroel Baum
734703e938
update resume 2026-05-18 15:05:46 +03:00
3cb74f2bd9
update from address in forgejo 2026-05-14 10:16:09 +03:00
1837cfacb3
add mailer settings to forgejo 2026-05-14 10:06:05 +03:00
05ac7b8bc4
add mailer creds for forgejo 2026-05-14 10:05:41 +03:00
d0d7d13ff7
update resume 2026-05-13 10:14:38 +03:00
9137d988b1
update resume 2026-05-12 19:55:21 +03:00
8d0f110ea7
add resume repo as input to flake and use it as nginx root 2026-05-12 19:39:47 +03:00
cb5d682b7d
update backend vendor hash 2026-05-11 10:44:53 +03:00
5585eaf745
update tide and secrets with mailjet config 2026-05-11 10:38:59 +03:00
f602861bff
update tide 2026-05-10 19:36:31 +03:00
719cb5334e
update tide and secrets 2026-05-10 11:06:30 +03:00
72797604b5
update tide 2026-05-09 22:30:17 +03:00
1e8d26bc6e
set useAcmehost to null 2026-05-09 22:21:53 +03:00
a4c735ec17
add direnv to use flake 2026-05-09 22:21:39 +03:00
07042daa14
Merge branch 'fix-sops-age-keyfile' 2026-05-09 22:17:19 +03:00
f0259cfb96 point sops at age key file
sops-nix's default identity discovery imports the host's SSH
ed25519 key as an age identity, but secrets/tide.yaml is encrypted
to the age key generated with age-keygen and stored at
/var/lib/sops-nix/key.txt. Without sops.age.keyFile pointing at
that path, activation fails with 'Error getting data key: 0
successful groups required, got 0'. Also blank the SSH/GPG
fallback paths so the module never silently picks up an
unintended identity.
2026-05-09 22:17:15 +03:00
bd417f5784
update tide lock for pgsql 2026-05-08 16:09:00 +03:00
063813a4c3
Merge branch 'switch-tide-input' 2026-05-08 16:07:29 +03:00
ed0dfd568d pin tide flake input to forgejo
Switch from a local path: input to the canonical forgejo URL so
remote nixos-rebuild on the server can resolve it. Lock file
pinned to the current TIDE master revision.
2026-05-08 16:07:26 +03:00
9312eaef3e
update tide lock 2026-05-08 16:02:29 +03:00
4fd52921d6
add sops and secrets 2026-05-08 15:58:20 +03:00
b44795bd59
Merge branch 'add-tide' 2026-05-08 10:59:05 +03:00
d195c6b37c wire tide service into nixos config
Imports the tide nixos module from the TIDE flake and configures
it for tide.yisroelbaum.com (frontend) and apitide.yisroelbaum.com
(backend), reusing the existing wildcard ACME cert. Secrets are
pulled from sops-encrypted secrets/tide.yaml; replace the
placeholder with real encrypted content before deploy.
2026-05-08 10:56:13 +03:00
b7716061e4 add tide and sops-nix flake inputs 2026-05-08 10:56:08 +03:00
792f83a324
update git submodule for home manager 2026-04-09 22:16:08 +03:00