Daniel Micay
|
6fe2545505
|
pacreport: sort unowned files configuration
|
2024-10-29 18:38:41 -04:00 |
|
Daniel Micay
|
a41dd84197
|
pacreport: add more baseline configuration files
|
2024-10-29 18:32:28 -04:00 |
|
Daniel Micay
|
d9d35955f8
|
pacreport: add certbot logrotate configuration
|
2024-10-29 18:25:51 -04:00 |
|
Daniel Micay
|
9417513717
|
replace 3.releases.grapheneos.org server
|
2024-10-29 09:21:34 -04:00 |
|
Daniel Micay
|
e2c73f3c6d
|
drop discard for swapfile
This doesn't quite work as intended since the reserved file space is
dropped and it results in fragmentation.
|
2024-10-26 13:54:07 -04:00 |
|
Daniel Micay
|
ef3d3f35e1
|
handle kernel.sched_energy_aware being unavailable
|
2024-10-26 13:10:36 -04:00 |
|
Daniel Micay
|
0c9bc19b9d
|
add imagemagick to grapheneos.social for now
We can switch to one of the newer options later or wait for the package
to get updated to do it for us.
|
2024-10-23 08:16:46 -04:00 |
|
Daniel Micay
|
3c8a2b7ac2
|
deploy-initial: fix obtaining swap size
|
2024-10-22 06:53:52 -04:00 |
|
Daniel Micay
|
fed4e23007
|
deploy-initial update IMAGE_VERSION
|
2024-10-22 06:42:03 -04:00 |
|
Daniel Micay
|
9b3b3e69c8
|
raise release server journal size to 1G
|
2024-10-21 15:36:30 -04:00 |
|
Daniel Micay
|
5cc16bab0e
|
use incrementing auto-restart delay for unbound
|
2024-10-21 07:25:41 -04:00 |
|
GrapheneOS
|
c0581d4da5
|
add 9th gen Pixels to count script
|
2024-10-21 05:22:59 -04:00 |
|
Daniel Micay
|
e6df4e30e4
|
remove extra newline
|
2024-10-20 14:57:09 -04:00 |
|
Daniel Micay
|
4a7919d736
|
add ManagedOOMPreference=avoid for sshd.service
|
2024-10-20 13:45:24 -04:00 |
|
Daniel Micay
|
5d28d1e87f
|
switch to systemd-based initramfs
|
2024-10-19 13:54:54 -04:00 |
|
Daniel Micay
|
960d08b3e6
|
drop global environment configuration for less
This is being handled per-user now.
|
2024-10-18 12:44:37 -04:00 |
|
Daniel Micay
|
7eeddfcffd
|
raise journal size for discuss.grapheneos.org
|
2024-10-14 06:30:16 -04:00 |
|
Daniel Micay
|
703e504928
|
raise journal size for matrix.grapheneos.org
|
2024-10-14 06:29:24 -04:00 |
|
Daniel Micay
|
652ca46ed9
|
raise journal size for 0.grapheneos.org
|
2024-10-14 06:28:03 -04:00 |
|
Daniel Micay
|
3d80dc4eed
|
add dependencies for session ticket rotation unit
|
2024-10-14 06:13:15 -04:00 |
|
Daniel Micay
|
2ddd98d485
|
cleanup session ticket key units
|
2024-10-14 06:11:32 -04:00 |
|
Daniel Micay
|
05d903ae3f
|
move umask to systemd unit configuration
|
2024-10-14 06:11:32 -04:00 |
|
Daniel Micay
|
9ec62a0b79
|
move session ticket mount to fstab
|
2024-10-14 06:00:42 -04:00 |
|
Daniel Micay
|
cbed8c0b42
|
use standard override.conf name for unit overrides
|
2024-10-13 21:27:51 -04:00 |
|
Daniel Micay
|
26bedef1a1
|
enable ManagedOOMSwap=kill for root slice
|
2024-10-13 05:26:08 -04:00 |
|
Daniel Micay
|
e0fa670834
|
update python dependencies
|
2024-10-11 02:44:17 -04:00 |
|
Daniel Micay
|
b91653c696
|
enable systemd-oomd.service during initial deployment
|
2024-10-10 23:48:01 -04:00 |
|
Daniel Micay
|
a410e5aac6
|
enable sysstat.service during initial deployment
|
2024-10-10 23:47:40 -04:00 |
|
Daniel Micay
|
ce3ab7802c
|
certbot: add gs-loc.apple.grapheneos.org
|
2024-09-26 14:55:04 -04:00 |
|
Daniel Micay
|
051a8bddf7
|
add disconnect script
|
2024-09-25 17:44:13 -04:00 |
|
Daniel Micay
|
858a99a534
|
raise discuss.grapheneos.org journal size
|
2024-09-23 13:22:14 -04:00 |
|
Daniel Micay
|
3578236a7d
|
force DMARC enforcement for hotmail.com and live.com
|
2024-09-15 01:31:08 -04:00 |
|
Daniel Micay
|
167618930b
|
update for pacman 7.0.0 download sandbox
|
2024-09-15 01:14:01 -04:00 |
|
Daniel Micay
|
ea3d577ac6
|
use incrementing auto-restart delay
|
2024-09-15 00:20:45 -04:00 |
|
Daniel Micay
|
76c1ae3aaf
|
enable auto-restart for unbound and chronyd
|
2024-09-14 22:27:40 -04:00 |
|
Daniel Micay
|
b04898594a
|
add valkey to discuss.grapheneos.org
|
2024-09-14 20:43:30 -04:00 |
|
Daniel Micay
|
1f411314b5
|
enable indefinite service restarts
|
2024-09-14 20:16:10 -04:00 |
|
Daniel Micay
|
a787d6c446
|
use default RestartSec for nginx
|
2024-09-14 20:16:10 -04:00 |
|
Daniel Micay
|
b268bd4e59
|
raise journal size for EU website server
|
2024-09-13 06:32:39 -04:00 |
|
Daniel Micay
|
bdc6ee4a95
|
raise journal size for NA network servers
|
2024-09-12 18:59:55 -04:00 |
|
Daniel Micay
|
0e3b64f259
|
update python dependencies
|
2024-09-05 20:58:00 -04:00 |
|
Daniel Micay
|
ae774a4661
|
drop base-devel from grapheneos.social
The package is now working around this issue.
|
2024-09-05 20:56:58 -04:00 |
|
Daniel Micay
|
b6d8ef1500
|
add intended CrashAction configuration
|
2024-08-18 19:49:51 -04:00 |
|
Daniel Micay
|
9638832f82
|
switch back to MaxRetentionSec now that it's fixed
The fix for this causing excessive log rotation was backported to systemd 256.5.
|
2024-08-18 19:41:04 -04:00 |
|
Daniel Micay
|
4dc70b8df7
|
update journald.conf
|
2024-08-18 19:28:57 -04:00 |
|
Daniel Micay
|
0dfe08d66e
|
add stress package to all servers
This is useful for regularly done testing and doesn't pull in a huge
number of dependencies like stress-ng.
|
2024-08-11 18:30:34 -04:00 |
|
Daniel Micay
|
37842e4d17
|
temporarily add base-devel to grapheneos.social
Needed to work around a Ruby dependency issue.
|
2024-08-11 17:51:10 -04:00 |
|
Daniel Micay
|
27bd153454
|
nftables: use allowlist for ICMP types
|
2024-07-25 23:13:29 -04:00 |
|
Daniel Micay
|
437c5a5f3d
|
raise journal file size for grapheneos.social
|
2024-07-25 11:59:56 -04:00 |
|
Daniel Micay
|
edfe1fae10
|
extend info fetching to sysctl values
|
2024-07-24 16:58:11 -04:00 |
|