Commit graph

87 commits

Author SHA1 Message Date
1e8603c677
synapse: delete unnessary parts of the default config
(i.e. those parts which are managable by nix, and a couple which were defined
twice were deduplicated)
2021-04-20 23:09:57 +02:00
schweby
117ac9d9fd
hainich/matrix: set some setting, miss others 2021-04-20 23:09:57 +02:00
f739329087
synapse: add mail config (currently broken)
tl;dr: mail config works, but on trying to send mail synapse gets rejected by
postfix for using a too-old version of tls, as apparently tls in twisted (the
python library used for mail in synapse) is just hardcoded to v1, which our
postfix rejects.

```
postfix/smtpd[9737]: warning: TLS library problem: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol:ssl/statem/statem_srvr.c:1685:
synapse[9211]: synapse.handlers.identity: [POST-41] Error sending threepid validation email to stuebinm@hacc.space
               Traceback (most recent call last):
                 File "/nix/store/55mh6w2ark2blrbkyq0d1jjg9alb1dw5-matrix-synapse-1.29.0/lib/python3.8/site-packages/synapse/handlers/identity.py", line 382, in send_threepid_validation
                   await send_email_func(email_address, token, client_secret, session_id)
                 File "/nix/store/55mh6w2ark2blrbkyq0d1jjg9alb1dw5-matrix-synapse-1.29.0/lib/python3.8/site-packages/synapse/push/mailer.py", line 207, in send_add_threepid_mail
                   await self.send_email(
                 File "/nix/store/55mh6w2ark2blrbkyq0d1jjg9alb1dw5-matrix-synapse-1.29.0/lib/python3.8/site-packages/synapse/push/mailer.py", line 349, in send_email
                   await make_deferred_yieldable(
               twisted.mail._except.SMTPConnectError: Unable to connect to server.
```

This is a known issue [1], which should be fixed in the current version of twisted,
which will be in the next version of synapse.

[1] https://github.com/matrix-org/synapse/issues/6211
2021-04-20 23:09:57 +02:00
4c7e07241b
element: move from element.matrix.hacc.space to element.hacc.space 2021-04-20 23:09:57 +02:00
8ff76cfdbf
synapse/element: nicer code layout for the config 2021-04-20 23:09:57 +02:00
9a8ca975d5
Synapse/Element: Fixed the config.
In brief: the example was missing a protocol specification.

Also I just learnt that the element at app.element.io uses deprecated
config options. Fun!
2021-04-20 23:09:57 +02:00
schweby
b4441ee067
hainich/matrix: init matrix & element 2021-04-20 23:09:32 +02:00
schweby
908d6df2da
sources: update sources
this also disables mattermost-beta because of a version mismatch with
the development branch
will be readded with MR
2021-04-20 21:52:18 +02:00
schweby
df31a3da35
hainich/minecraft: get server.jar via sources.json 2021-04-17 17:19:52 +02:00
schweby
243d0bf14d
hainich/minecraft: fix & reorder config
fixes a formatting error in jvmOpts and slightly reoders the config
2021-04-17 17:15:49 +02:00
schweby
75ec36dda2
hainich/mumble: import website from sources.json 2021-04-16 15:54:25 +02:00
6e36ff58e2 workadventure: update and manage sources with niv
Changes:
 - workadventure is now pulled from stuebinm.eu/git via niv, and
   should be updated automatically along with the other sources
 - the same is true for the default map, which gets pulled directly from
   its gitlab sources.
 - this setup may potentially break things if I decide to rename an
   option upstream, but I don't think that'll happen too often
 - made the code a little nicer
 - uses workadventure-xce now, since the tabascoeye version is now gone

Open for discussion:
 - afaik know, the current version of workadventure-xce now contains
   fediventure-specific patches. Do we want that, or should we switch
   to the unfederated version?
2021-04-15 20:12:32 +00:00
hexchen
c3c3bca114 hainich/mail: update mailing lists, remove unused 2021-04-15 20:09:49 +00:00
schweby
1c446bec8d
hainich/hedgedoc: redirect pad.hacc.earth to pad.hacc.space 2021-04-15 14:13:15 +02:00
schweby
25568db129
hainich/nginx: disable interest cohort globally 2021-04-15 10:16:20 +02:00
schweby
0c55ccb47b
hainich: reduce backup retention 2021-04-15 06:37:12 +02:00
schweby
ccb4469922
hainich: Set more sensible snapshot retention time 2021-04-15 06:35:31 +02:00
schweby
b136ca090f
hainich: remove hasenloch 2021-04-15 06:18:26 +02:00
schweby
1f40f1f142
hainich: disable workadventure 2021-04-14 22:47:25 +02:00
schweby
caa45759a1
hainich/minecraft: update to paper 1.16.5-592 2021-04-14 22:43:35 +02:00
schweby
7c04319456
hainich/minecraft: update to paper 1.16.5-583 2021-04-07 09:38:09 +02:00
L3D ワッフルマイスター
b2d2235d4d remove newline in murmur.nix 😉 2021-04-05 06:46:34 +00:00
schweby
ee53d85b94
hainich/mumble: switch to updated site 2021-04-05 08:39:34 +02:00
schweby
87b3518ebd
hainich/minecraft: update to paper 1.16.5-576 2021-04-03 21:17:21 +02:00
schweby
cfb0cd5013
hainich/minecraft: add optimised GC options 2021-04-03 21:17:21 +02:00
schweby
5b37fde996
Merge branch 'mattermost-upgrade' 2021-04-03 10:23:00 +02:00
schweby
6db58c4a01
hasenloch: add FAQ and Contact 2021-04-03 08:00:59 +02:00
schweby
2974b9688b
hasenloch: update to newer version 2021-04-02 16:38:31 +02:00
schweby
c10caa5b0f
hainich/mattermost: disable container firewall 2021-03-30 23:57:52 +02:00
schweby
78e607a28d
hainich: block x_tables module
this also blocks the x_tables module to prent it from loading
ip_tables
2021-03-30 17:59:26 +02:00
schweby
d1e88ef87a
hainich/nginx: disable /var/secrets/ingest.conf
If the file in not present, the preExec check for the config fails and
disrupts the deploy.
Before readding make sure the file will always be present!
2021-03-27 11:48:43 +01:00
schweby
1064836092
Revert "security: remove hexchen"
This reverts commit bab826b1c7.
Also fixes hexchen nix due new logic
2021-03-26 22:04:27 +01:00
schweby
5579a60b4e
Revert "security: remove hexchen mail"
This reverts commit 32b5958279.
2021-03-26 21:53:17 +01:00
011196f875
mattermost: disable analytics & telemetry
note that this ALSO disables the security alert features of mattermost [1],
which would send us alerts in case of security updates for our current
mattermost version. I have disabled it since it would send information
about our instance (including e.g. the current number of active users) to
mattermost every 24 hours.

Since we now essentially maintain our own set of mattermost packages, I
recommend at least some of us subscribe to the mattermost release blog [2],
and manually update the mattermost sources in `/pkgs/mattermost` as required
(I have done so already). The release blog is also available as an rss feed [3].

[1] https://docs.mattermost.com/administration/telemetry.html#security-update-check-feature
[2] https://mattermost.com/blog/category/releases
[3] https://mattermost.com/blog/category/releases/rss
2021-03-25 15:51:01 +01:00
stuebinm
d5cf2abccc
hainich: init mattermost beta 2021-03-24 22:37:38 +01:00
schweby
b604cee52a
hainich/minecraft: Update to paper 1.16.6-167 2021-03-24 21:13:26 +01:00
schweby
077e8264f7
hainich/hasenloch: set config suitable for r2r 2021-03-24 19:28:22 +01:00
schweby
f54be467b8
hainich/hasenloch: update to r2r version
to update to this version removal of the cache at
*engelsystem/storage/cache is necessary for the site to work
2021-03-24 19:19:33 +01:00
schweby
99d534586a
hainich/minecraft: update to paper 1.16.5-562 2021-03-20 17:09:58 +01:00
schweby
8377d27b87 hainich: init minecraft server
this server replaces the vanilla minecraft server on libocedrus
2021-03-20 16:59:47 +01:00
schweby
071f135ef4
hainich: Blacklist ip_tables and ip6_tables
Prevent **something** (docker) from loading the iptables kernel modules
and breaking nftables
2021-03-20 16:56:56 +01:00
schweby
233ffdd769
hainich/nginx: redirect hacc.space to hacc.earth
redirect was previously managed on libocerus
hacc.space now points to hainich
2021-03-18 19:12:14 +01:00
schweby
77c06c5509
hainich/nginx: let all empty subdomains 404
* make hainich.hacc.space the default virtualHost for nginx
if no host is running on that subdomain, this will be shown
* disable SSL, so no pesky SSL error for empty subdomains anymore
* remove lots of unneeded brackes and semicolons
2021-03-18 19:04:00 +01:00
schweby
94eafe59d2
hainich/nginx: remove rc3 cluster site 2021-03-18 19:01:44 +01:00
dbbdde76c7
mumble.hacc.space: move site from gitlab into nix derivation
Since the delivery of mumble.hacc.space/murmur.hacc.space via gitlab pages
broke (for whatever reason), I've packaged the site into an ad-hoc nix
derivation, which is now delivered locally by nginx instead. This has a
couple benefits (mainly that we no longer depend on gitlab pages), but
also the downside that we can't just update the site via gitlab's CI/CD
pipelines anymore.
2021-03-17 22:35:51 +01:00
schweby
32b5958279 security: remove hexchen mail 2021-03-13 00:27:53 +01:00
schweby
bab826b1c7 security: remove hexchen 2021-03-12 23:53:51 +01:00
schweby
2d4309fdf4 hainich: init workadventure 2021-03-11 00:11:51 +01:00
hexchen
6f2cc7bf7f hainich: remove obsolete nginx host 2021-03-09 10:10:03 +00:00
hexchen
bc58060390 mail: update rinderhacc password and alias 2021-03-09 10:03:18 +00:00