summaryrefslogtreecommitdiff
path: root/tw/services
AgeCommit message (Collapse)Author
2023-12-14Run Matrix services in OCI containersTimo Wilken
2023-12-13Declare dependency on dockerd properlyTimo Wilken
2023-12-13Configure Grafana to be run behind a reverse proxyTimo Wilken
2023-12-13Generalise Docker service and use it to run GrafanaTimo Wilken
2023-12-13Expose Grafana externallyTimo Wilken
2023-11-29Serve Git repos over SSH and back them upTimo Wilken
2023-11-29Remove duplicate nginx MIME typeTimo Wilken
2023-11-29Fix nginx syntax for reverse proxiesTimo Wilken
2023-11-29Simplify nginx certificate deployment hookTimo Wilken
2023-11-29Migrate Nextcloud from Apache to nginxTimo Wilken
2023-11-23Specify custom battery/adapter names for polybarTimo Wilken
2023-11-20Manage new Framework laptopTimo Wilken
2023-11-20Make WireGuard service install its own secrets automaticallyTimo Wilken
2023-11-08Use age for secrets encryptionTimo Wilken
2023-11-05Add secrets serviceTimo Wilken
Allow managing secrets and passwords using Guix. Secrets are encrypted in the Guix channel repository and decrypted using a single host key at activation time.
2023-11-05Fix `match-record' indentationTimo Wilken
2023-11-03Fix path to Nextcloud cron.phpTimo Wilken
2023-11-02Cache restic repos depending on repository typeTimo Wilken
It makes more sense never to use a cache for local repositories (since they're on local disk already), but to use it (and keep it clean) for remote REST repositories.
2023-11-02Fix Guix' restic's apparent lack of support for --keep-X=-1Timo Wilken
2023-11-02Stop depending on WireGuard in Grafana serviceTimo Wilken
This stops Grafana from restarting whenever restarting the WireGuard service.
2023-11-01Clean up old Nextcloud backups automaticallyTimo Wilken
2023-11-01Generalise Restic declarationsTimo Wilken
* rename confusingly named restic-*-repository variables to restic-scheduled-* * generalise repository handling, allowing local and REST repositories both as backup and cleanup targets * generalise password handling, allowing passwords from pass or from files for backup, for cleanup and as part of a REST URL
2023-10-28Store Nextcloud backups in restic repoTimo Wilken
Replace the Nextcloud backup shell script with a Guile program that writes to a restic repository instead.
2023-10-28Fix import for restic-rest-serverTimo Wilken
2023-09-19Formalise password keys to avoid PATH issuesTimo Wilken
Mcron seems to set a restricted PATH now, so make sure it knows where to find "pass". Also use less shell substitution and implement repository URL building in Guile.
2023-09-12Add Mythic dynamic DNS serviceTimo Wilken
2023-09-12Factor out common desktop servicesTimo Wilken
Most of the code for setting desktop layouts is common between machines. Also, make the blueman-applet service reusable.
2023-09-12Factor out proper Git and GnuPG service typesTimo Wilken
2023-09-08Support limiting restic cleanup by hostnameTimo Wilken
2023-08-02Avoid using `%unset-value' directlyTimo Wilken
Just don't specify a default value to use it, and use `maybe-value-set?' to check for user-provided values.
2023-06-03Indent *-file functions more convenientlyTimo Wilken
Files with potentially long or complex contents shouldn't be indented quite as far.
2023-06-03Simplify SSL_CERT_DIR expressionTimo Wilken
No need to nest string-append and file-append.
2023-06-03Set SSL_CERT_* variables for php-fpmTimo Wilken
This should let Nextcloud News fetch feeds when they're added by the user, not just during cron jobs.
2023-06-03Install and enable php-imagick for NextcloudTimo Wilken
2023-05-25Run Grafana using DockerTimo Wilken
2023-05-21Extract Nextcloud cron command into scriptTimo Wilken
2023-05-20Raise OPcache memory limitTimo Wilken
Requested by Nextcloud's self-check.
2023-05-20Clean up phone backupsTimo Wilken
2023-05-20Add restic cleanup serviceTimo Wilken
2023-05-20Rename `restic-backup-repository' to allow for cleanup reposTimo Wilken
2023-04-30Configure regular restic backupsTimo Wilken
2023-04-28Use proper SSL cert pathTimo Wilken
This avoids relying on nss-certs being installed system-wide.
2023-04-25Restic REST server is now an upstream packageTimo Wilken
2023-04-22Set SSL CA cert locations for Nextcloud cronTimo Wilken
2023-04-21Fix restic-server setupTimo Wilken
2023-04-21Draft of restic server deploymentTimo Wilken
2023-04-21Add initial restic-server codeTimo Wilken
2023-02-20Explicitly specify system-wide SSL certsTimo Wilken
By default, OpenSSL only uses its built-in certificates, but we need to use the system-wide ones for connecting to YouTube and BBC Sounds.
2023-02-19Add get-iplayer serviceTimo Wilken
2023-02-19Simplify yt-dlp scheduling function furtherTimo Wilken
This way of trying to schedule every second day doesn't actually work. Just run every night at the same hour and randomise the minutes.