summaryrefslogtreecommitdiff
path: root/tw/services
AgeCommit message (Collapse)Author
2023-11-20Manage new Framework laptopTimo Wilken
2023-11-20Make WireGuard service install its own secrets automaticallyTimo Wilken
2023-11-08Use age for secrets encryptionTimo Wilken
2023-11-05Add secrets serviceTimo Wilken
Allow managing secrets and passwords using Guix. Secrets are encrypted in the Guix channel repository and decrypted using a single host key at activation time.
2023-11-05Fix `match-record' indentationTimo Wilken
2023-11-03Fix path to Nextcloud cron.phpTimo Wilken
2023-11-02Cache restic repos depending on repository typeTimo Wilken
It makes more sense never to use a cache for local repositories (since they're on local disk already), but to use it (and keep it clean) for remote REST repositories.
2023-11-02Fix Guix' restic's apparent lack of support for --keep-X=-1Timo Wilken
2023-11-02Stop depending on WireGuard in Grafana serviceTimo Wilken
This stops Grafana from restarting whenever restarting the WireGuard service.
2023-11-01Clean up old Nextcloud backups automaticallyTimo Wilken
2023-11-01Generalise Restic declarationsTimo Wilken
* rename confusingly named restic-*-repository variables to restic-scheduled-* * generalise repository handling, allowing local and REST repositories both as backup and cleanup targets * generalise password handling, allowing passwords from pass or from files for backup, for cleanup and as part of a REST URL
2023-10-28Store Nextcloud backups in restic repoTimo Wilken
Replace the Nextcloud backup shell script with a Guile program that writes to a restic repository instead.
2023-10-28Fix import for restic-rest-serverTimo Wilken
2023-09-19Formalise password keys to avoid PATH issuesTimo Wilken
Mcron seems to set a restricted PATH now, so make sure it knows where to find "pass". Also use less shell substitution and implement repository URL building in Guile.
2023-09-12Add Mythic dynamic DNS serviceTimo Wilken
2023-09-12Factor out common desktop servicesTimo Wilken
Most of the code for setting desktop layouts is common between machines. Also, make the blueman-applet service reusable.
2023-09-12Factor out proper Git and GnuPG service typesTimo Wilken
2023-09-08Support limiting restic cleanup by hostnameTimo Wilken
2023-08-02Avoid using `%unset-value' directlyTimo Wilken
Just don't specify a default value to use it, and use `maybe-value-set?' to check for user-provided values.
2023-06-03Indent *-file functions more convenientlyTimo Wilken
Files with potentially long or complex contents shouldn't be indented quite as far.
2023-06-03Simplify SSL_CERT_DIR expressionTimo Wilken
No need to nest string-append and file-append.
2023-06-03Set SSL_CERT_* variables for php-fpmTimo Wilken
This should let Nextcloud News fetch feeds when they're added by the user, not just during cron jobs.
2023-06-03Install and enable php-imagick for NextcloudTimo Wilken
2023-05-25Run Grafana using DockerTimo Wilken
2023-05-21Extract Nextcloud cron command into scriptTimo Wilken
2023-05-20Raise OPcache memory limitTimo Wilken
Requested by Nextcloud's self-check.
2023-05-20Clean up phone backupsTimo Wilken
2023-05-20Add restic cleanup serviceTimo Wilken
2023-05-20Rename `restic-backup-repository' to allow for cleanup reposTimo Wilken
2023-04-30Configure regular restic backupsTimo Wilken
2023-04-28Use proper SSL cert pathTimo Wilken
This avoids relying on nss-certs being installed system-wide.
2023-04-25Restic REST server is now an upstream packageTimo Wilken
2023-04-22Set SSL CA cert locations for Nextcloud cronTimo Wilken
2023-04-21Fix restic-server setupTimo Wilken
2023-04-21Draft of restic server deploymentTimo Wilken
2023-04-21Add initial restic-server codeTimo Wilken
2023-02-20Explicitly specify system-wide SSL certsTimo Wilken
By default, OpenSSL only uses its built-in certificates, but we need to use the system-wide ones for connecting to YouTube and BBC Sounds.
2023-02-19Add get-iplayer serviceTimo Wilken
2023-02-19Simplify yt-dlp scheduling function furtherTimo Wilken
This way of trying to schedule every second day doesn't actually work. Just run every night at the same hour and randomise the minutes.
2023-02-19Use mcron's #:user instead of manual setuidTimo Wilken
2023-02-19Generate separate script for yt-dlp mcron actionTimo Wilken
2023-02-19Simplify yt-dlp scheduling functionTimo Wilken
2023-02-19Improve yt-dlp serviceTimo Wilken
- allow configuring odd or even days (useful for future get-iplayer service so they run on alternating days) - auto-update yt-dlp if not using the system package
2023-02-19Randomise yt-dlp times betterTimo Wilken
2023-02-19Add yt-dlp serviceTimo Wilken
2023-02-18Extract common service sets into separate modulesTimo Wilken
Common service sets (NextCloud, Matrix, WireGuard) should be in their own modules to make things neater, instead of being interleaved with operating system declarations.