superconfig/configs/services/pad/ at master · lass.pds.lassul.us/superconfig · Tangled

lass.pds.lassul.us / superconfig

0

This repository has no description

0

superconfig / configs / services / pad

3 files

at master

Hermes modules.backup: per-service backup state, move neoprism paths into their services 1d ago

configs.services.pad: key Zitadel users by sub, not preferred_username HedgeDoc looks up users only by profileid, in one table with the GitHub logins, whose profileid is the numeric GitHub user id. Without userProfileIdAttr it is the username, which anyone chooses when registering at id.lassul.us: a Zitadel user named after someone's GitHub id logged in as that GitHub user, and a renamed or deleted username handed its pad account to the next user taking the name. sub is the Zitadel user id, which Zitadel generates and never reuses. Existing Zitadel accounts in HedgeDoc are keyed by their login name and need their profileid changed to the Zitadel user id.

2 days ago

modules.backup: per-service backup state, move neoprism paths into their services lass.backup.state.<name> lets every service declare its folders, excludes, pre/post backup hooks and the paths its pre hook writes to next to its definition. The borg job (still `hetzner`, so archive names and pruning continue) and the borgbackup ssh key generator exist only on machines that set lass.backup.repo; neoprism's backup.nix now only points to the storage box. Pre hooks run inside the borg unit as before; each runs on its own with pipefail, all of them run and the job fails if any did (a failing pg_dump used to go unnoticed behind the gzip pipe). Post hooks run in ExecStopPost as root, also after a failed backup. The four bridge dumps are split from the old loop into the bridges' files. The dump subdirs are created by the hooks instead of tmpfiles. hedgedoc's uploads directory is backed up now. The imgur items (hedgedoc image uploads) are backed up now too.

1 day ago

upload-any-file.patch

configs.services.pad: upload any file to p.krebsco.de, drop external link warning

1 week ago