Just using the SNM forward doesn't quit work because it will run into tons of spf rejections. We have to rewrite the origin and set reply-to. For postfix, the correct way forward here is to…
We maintain all the input related overlays directly in the flake.nix.
Please guard the config behind a mkIf with an enable option like options.bagel.status.enable = mkEnableOption "status page";. Currently, applying this change would enable this service on every host.
The nginx stuff is fine for now, but we should generalize proxying a bit in the future. (having every service add their own firewall rules, and nginx config is redundant and error prone)
It would be preferable to pull the domain information from the terraform/dnsimple.nix, so we avoid maintaining the list of domains twice.
I don't see how this change closes #108 it just moves the occasional unpacking problem from /tmp to /var/lib/gerrit. Btw I'm pretty sure that it's a bad idea to change the tmp_dir setting to a non-temporary directory.
To be a bit more precise, it works some of the time, but often fails unpacking/setting up the vendored analyzer for some reason. It usually fixes it self after some time. So it's not a pressing…
d780f18534
Merge pull request 'feat(dns): migrate functions from gandi to dnsimple' (#113) from janik/dnsimple into main