smalltech, branch main The Small Tech Kit ("STK"), a collection of nix and NixOS configuration, and associated documentation, ISL's public resource for small organizations that want to host their own infrastructure. http://code.internetsafetylabs.org/smalltech/atom?h=main 2026-03-03T23:31:25+00:00 release under the AGPL 2026-03-03T23:31:25+00:00 Irene Knapp ireneista@internetsafetylabs.org 2026-03-03T23:31:25+00:00 urn:sha1:65383c8c6171d9e8ee7c302fd3eb352ec30be252 Force-Push: initial development Change-Id: I93d306cfe8a767a050d4c449ca1bc941a6d4a9a4 remove the acme preliminary-selfsigned option 2026-01-30T06:00:16+00:00 Irene Knapp ireneista@internetsafetylabs.org 2026-01-30T05:59:05+00:00 urn:sha1:c1cf0f0aacfdd48a5c757ae010082a73e6a3a8bd in nixos 25.11 it's now the only supported behavior, so we don't need the option Force-Push: config Change-Id: Id6a82e7b6631569e8d75bdf35a5a9391575326cd documentation improvements 2025-10-22T23:40:46+00:00 Irene Knapp ireneista@internetsafetylabs.org 2025-10-22T23:40:46+00:00 urn:sha1:051b5bd85a8acd1a6b63a8678dfe9b032b14edd0 Change-Id: Iddb80b7d6ff1f747d961962623b7352e252b584f add some bootstrap groups 2025-10-22T23:40:28+00:00 Irene Knapp ireneista@internetsafetylabs.org 2025-10-22T23:40:28+00:00 urn:sha1:6dbe70dc2debd429b57b5b1f426227da5b8e4cd7 Change-Id: Ie821c8b8a87622c79a5d7a3b92670dbdf430b896 update user account name fields 2025-10-22T22:57:24+00:00 Irene Knapp ireneista@internetsafetylabs.org 2025-10-22T22:43:40+00:00 urn:sha1:9b5b4138aea712da6bebbb6cd41834ca40b76e09 Change-Id: Iff6c4537d3ad9513a7ef77c96d6400213e726918 Merge "comment out rootPW. Add openldap to the flake" into main 2025-10-22T22:52:04+00:00 Robert robert@coffeezombie.com 2025-10-22T22:52:04+00:00 urn:sha1:5f64a5b957ee1045f211a1282b2dc732385d41f4 comment out rootPW. 2025-10-22T22:47:24+00:00 Robert Orr robert@coffeezombie.com 2025-10-20T20:50:17+00:00 urn:sha1:216e505a44c2ca86491052e8fc4ce56dc732b261 Add openldap to the flake Change-Id: I727e8fe9f0fa4cf4bd98f8b1571837b543bb3311 haproxy needs to listen on IPv6 2025-10-21T03:32:14+00:00 Irene Knapp ireneista@internetsafetylabs.org 2025-10-21T03:30:57+00:00 urn:sha1:cedd0fee03e9ea896a7420dc79dcd51701320551 this came up during the server migration - the ACME cert failed because it was only listening on IPv4, and the new machine also does IPv6 Force-Push: it's been a long ops day and I just want this fully squared away, sorry Change-Id: Ic0a721c78059427dd38b99ff41d3e1c0566ac1cb Modify openldap.nix to get rid of tabs. 2025-10-17T18:37:58+00:00 Robert Orr robert@coffeezombie.com 2025-10-16T18:12:14+00:00 urn:sha1:7987c3d069ea6c2adb3c06d4bada0cef1121948b First try at openldap configuration. also an initial ISL.ldif and some example ldif and a list of commands that work when run on the server itself. Also, some different example ldif files Change-Id: I0d702410fbf5a6aa4c626e4f1fc233bb72bad4e5 add a skeleton for documentation 2025-10-10T05:46:34+00:00 Irene Knapp ireneista@internetsafetylabs.org 2025-10-10T05:46:34+00:00 urn:sha1:aad528d1b211e64ffe3f5688c141d442d7fa081a Change-Id: I528864e13c4b318dd70a004b8c2029831863c37c