smalltech/services, branch mainThe Small Tech Kit ("STK"), a collection of nix and NixOS configuration, and associated documentation, ISL's public resource for small organizations that want to host their own infrastructure.http://code.internetsafetylabs.org/smalltech/atom?h=main2026-01-30T06:00:16+00:00remove the acme preliminary-selfsigned option2026-01-30T06:00:16+00:00Irene Knappireneista@internetsafetylabs.org2026-01-30T05:59:05+00:00urn:sha1:c1cf0f0aacfdd48a5c757ae010082a73e6a3a8bd
in nixos 25.11 it's now the only supported behavior, so we don't need the option
Force-Push: config
Change-Id: Id6a82e7b6631569e8d75bdf35a5a9391575326cd
add some bootstrap groups2025-10-22T23:40:28+00:00Irene Knappireneista@internetsafetylabs.org2025-10-22T23:40:28+00:00urn:sha1:6dbe70dc2debd429b57b5b1f426227da5b8e4cd7
Change-Id: Ie821c8b8a87622c79a5d7a3b92670dbdf430b896
update user account name fields2025-10-22T22:57:24+00:00Irene Knappireneista@internetsafetylabs.org2025-10-22T22:43:40+00:00urn:sha1:9b5b4138aea712da6bebbb6cd41834ca40b76e09
Change-Id: Iff6c4537d3ad9513a7ef77c96d6400213e726918
Merge "comment out rootPW. Add openldap to the flake" into main2025-10-22T22:52:04+00:00Robertrobert@coffeezombie.com2025-10-22T22:52:04+00:00urn:sha1:5f64a5b957ee1045f211a1282b2dc732385d41f4comment out rootPW.2025-10-22T22:47:24+00:00Robert Orrrobert@coffeezombie.com2025-10-20T20:50:17+00:00urn:sha1:216e505a44c2ca86491052e8fc4ce56dc732b261
Add openldap to the flake
Change-Id: I727e8fe9f0fa4cf4bd98f8b1571837b543bb3311
haproxy needs to listen on IPv62025-10-21T03:32:14+00:00Irene Knappireneista@internetsafetylabs.org2025-10-21T03:30:57+00:00urn:sha1:cedd0fee03e9ea896a7420dc79dcd51701320551
this came up during the server migration - the ACME cert failed because
it was only listening on IPv4, and the new machine also does IPv6
Force-Push: it's been a long ops day and I just want this fully squared away, sorry
Change-Id: Ic0a721c78059427dd38b99ff41d3e1c0566ac1cb
Modify openldap.nix to get rid of tabs.2025-10-17T18:37:58+00:00Robert Orrrobert@coffeezombie.com2025-10-16T18:12:14+00:00urn:sha1:7987c3d069ea6c2adb3c06d4bada0cef1121948b
First try at openldap configuration. also an initial ISL.ldif and some example ldif and a list of commands that work when run on the server itself. Also, some different example ldif files
Change-Id: I0d702410fbf5a6aa4c626e4f1fc233bb72bad4e5
add a skeleton openldap config, which isn't actually turned on yet2025-10-01T23:01:23+00:00Irene Knappireneista@internetsafetylabs.org2025-10-01T23:01:23+00:00urn:sha1:673ce2438657bd81d2226e2dc8918d4ef9d34137
I'd like to check this in to serve as a basis for your work, and you can turn it on when you feel it's ready. sound good?
Change-Id: Icd192b1a7beacf844b5df7742114271889fd384a
try to spin up haproxy, nginx, and an ACME client2025-07-31T22:30:51+00:00Irene Knappireneista@internetsafetylabs.org2025-07-31T22:25:21+00:00urn:sha1:58dd4440eaf6be9d260809b9dcb361d1f46f2abb
no login/ACL stuff yet
Change-Id: If6eeaed671b2711dc809e94ea00bc6387dcae2f4
turn on the Collabora backend service2025-06-19T21:21:52+00:00Irene Knappireneista@internetsafetylabs.org2025-06-19T20:47:16+00:00urn:sha1:d68e26828669648f5f91ac0a44a56a5f5193a432
Change-Id: I144a170de1d943caae2e77ef0121d448764741b1