smalltech - The Small Tech Kit ("STK"), a collection of nix and NixOS configuration, and associated documentation, ISL's public resource for small organizations that want to host their own infrastructure.

Age	Commit message (Collapse)	Author
2025-10-20	haproxy needs to listen on IPv6	Irene Knapp
	this came up during the server migration - the ACME cert failed because it was only listening on IPv4, and the new machine also does IPv6 Force-Push: it's been a long ops day and I just want this fully squared away, sorry Change-Id: Ic0a721c78059427dd38b99ff41d3e1c0566ac1cb
2025-10-17	Modify openldap.nix to get rid of tabs.	Robert Orr
	First try at openldap configuration. also an initial ISL.ldif and some example ldif and a list of commands that work when run on the server itself. Also, some different example ldif files Change-Id: I0d702410fbf5a6aa4c626e4f1fc233bb72bad4e5
2025-10-01	add a skeleton openldap config, which isn't actually turned on yet	Irene Knapp
	I'd like to check this in to serve as a basis for your work, and you can turn it on when you feel it's ready. sound good? Change-Id: Icd192b1a7beacf844b5df7742114271889fd384a
2025-07-31	try to spin up haproxy, nginx, and an ACME client	Irene Knapp
	no login/ACL stuff yet Change-Id: If6eeaed671b2711dc809e94ea00bc6387dcae2f4
2025-06-19	turn on the Collabora backend service	Irene Knapp
	Change-Id: I144a170de1d943caae2e77ef0121d448764741b1
2025-06-17	switch to using the upstream nixos mattermost module	Irene Knapp
	this does start up correctly, creating its state directory and so on. it isn't yet world-visible, because we don't have the SSO set up yet. that's likely to make testing it difficult, which is unfortunate but necessary, since there's no way it's secure. Change-Id: I9f40c21c2d41f7e037299cc51a26fdee4d53d3af
2025-06-05	add database setup; export everything from the flake as a module	Irene Knapp
	database.nix is substantially copied from the ISL config repo, with a few changes to make it more generic and usable by others I also removed stuff in mattermost.nix that wasn't doing anything; I'll detail that in comments Change-Id: I0ff6ea69f293dc4070f277f30ae0fde5254cd87c
2025-06-05	running mattermost server outside of docker.	Robert Orr
	The config.json file needs to be copied to /var/lib/mattermost/config with perms of 640 and owned by mattermost:mattermost. It is understood that this may need to be re-arranged to fit in with the rest of a system; and that the actual production deployment process is not yet defined. Change-Id: Ied3c80541fdc3b72bc7fdfa558114afd5d66d4c3