remove mqtt host

update pnpm deps hash for element admin to make host build
flake.lock: Update
2026-11-02 19:31:42 +01:00 · 2026-11-02 19:26:19 +01:00 · 2026-11-02 18:58:29 +01:00 · 2026-10-10 23:50:12 +02:00 · 2026-10-09 23:40:14 +02:00 · 2026-10-09 23:20:32 +02:00
42 changed files with 1044 additions and 1114 deletions
--- a/.sops.yaml
+++ b/.sops.yaml
@ -1,109 +1,66 @@
 keys:
-  - &admin_gpg_jtbx 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
-  - &admin_gpg_yuri 87AB00D45D37C9E9167B5A5A333448678B60E505
-  - &admin_gpg_june 057870A2C72CD82566A3EC983695F4FCBCAE4912
-  - &admin_gpg_haegar F38C9D4228FC6F674E322D9C3326D914EB9B8F55
-  - &admin_gpg_dario 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
-  - &admin_gpg_echtnurich 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
-  - &admin_gpg_c6ristian B71138A6A8964A3C3B8899857B4F70C356765BAB
-  - &admin_gpg_dante 3D70F61E07F64EC4E4EF417BEFCD9D20F58784EF
-  - &admin_age_lilly age19h7xtfmt3py3ydgl8d8fgh8uakxqxjr74flrxev3pgmvvx94kvtq5d932d
-  - &host_age_git age18zaq9xg9nhqyl8g7mvrqhsx4qstay5l9cekq2g80vx4920pswdfqpeafd7
-  - &host_age_forgejo_actions_runner age10xz2l7ghul7023awcydf4q3wurmszy2tafnadlarj0tvm7kl033sjw5f8t
-  - &host_age_matrix age1f7ams0n2zy994pzt0u30h8tex6xdcernj59t4d70z4kjsyzrr3wsy87xzk
-  - &host_age_public_web_static age19s7r8sf7j6zk24x9vumawgxpd2q8epyv7p9qsjntw7v9s3v045mqhmsfp0
-  - &host_age_woodpecker age1klxtcr23hers0lh4f5zdd53tyrtg0jud35rhydstyjq9fjymf9hsn2a8ch
-  - &host_age_penpot age10ku5rphtsf2lcxg78za7f2dad5cx5x9urgkce0d7tyqwq2enva9sqf7g8r
+  admins: &admin_keys
+    pgp: &admin_pgp_keys
+      - &admin_pgp_djerun EF643F59E008414882232C78FFA8331EEB7D6B70
+      - &admin_pgp_stb 21C9579E6503CA815A68ABD8541F9408A813C8B7
+      - &admin_pgp_fi 9633412309CCB83BFA39BA5F2FEF746201D7FCFE
+      - &admin_pgp_june 057870A2C72CD82566A3EC983695F4FCBCAE4912
+      - &admin_pgp_haegar F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+      # - &admin_pgp_dario 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD # expired
+      - &admin_pgp_echtnurich 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+      - &admin_pgp_c6ristian B71138A6A8964A3C3B8899857B4F70C356765BAB
+      - &admin_pgp_lilly D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+      - &admin_pgp_langoor 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+      - &admin_pgp_bitwhisker 41FFAF3D519CF5C039FBD8414BCC213729AF0E49
+    age: &admin_age_keys
+      - &admin_age_jtbx ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIBQgnQAq6FUSDK8bxtYPjx3oRCAKG+xy9J3Gas2ztJk
+      - &admin_age_lilly age19h7xtfmt3py3ydgl8d8fgh8uakxqxjr74flrxev3pgmvvx94kvtq5d932d
+  hosts:
+    - &host_age_git age18zaq9xg9nhqyl8g7mvrqhsx4qstay5l9cekq2g80vx4920pswdfqpeafd7
+    - &host_age_forgejo_actions_runner age10xz2l7ghul7023awcydf4q3wurmszy2tafnadlarj0tvm7kl033sjw5f8t
+    - &host_age_matrix age1f7ams0n2zy994pzt0u30h8tex6xdcernj59t4d70z4kjsyzrr3wsy87xzk
+    - &host_age_public_web_static age19s7r8sf7j6zk24x9vumawgxpd2q8epyv7p9qsjntw7v9s3v045mqhmsfp0
+    - &host_age_woodpecker age1klxtcr23hers0lh4f5zdd53tyrtg0jud35rhydstyjq9fjymf9hsn2a8ch
+    - &host_age_penpot age10ku5rphtsf2lcxg78za7f2dad5cx5x9urgkce0d7tyqwq2enva9sqf7g8r
 creation_rules:
  - path_regex: config/hosts/git/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
+      - age:
          - *host_age_git
+        merge:
+          - *admin_keys
  - path_regex: config/hosts/forgejo-actions-runner/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
+      - age:
          - *host_age_forgejo_actions_runner
+        merge:
+          - *admin_keys
  - path_regex: config/hosts/matrix/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
+      - age:
          - *host_age_matrix
+        merge:
+          - *admin_keys
  - path_regex: config/hosts/public-web-static/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
+      - age:
          - *host_age_public_web_static
+        merge:
+          - *admin_keys
  - path_regex: config/hosts/woodpecker/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
+      - age:
          - *host_age_woodpecker
+        merge:
+          - *admin_keys
  - path_regex: config/hosts/penpot/.*
    key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
-        age:
-          - *admin_age_lilly
-          - *host_age_penpot
-  - key_groups:
-      - pgp:
-          - *admin_gpg_jtbx
-          - *admin_gpg_yuri
-          - *admin_gpg_june
-          - *admin_gpg_haegar
-          - *admin_gpg_dario
-          - *admin_gpg_echtnurich
-          - *admin_gpg_c6ristian
      - age:
-          - *admin_age_lilly
+          - *host_age_penpot
+        merge:
+          - *admin_keys
+  - key_groups:
+      - *admin_keys
 stores:
  yaml:
    indent: 2
--- a/config/hosts/audio-hauptraum-kueche/audio.nix
+++ b/config/hosts/audio-hauptraum-kueche/audio.nix
@ -1,14 +0,0 @@
-{ pkgs, ... }:
-{
-  imports = [
-    ../../../modules/services/audio
-  ];
-
-  ccchh.services.audio = {
-    enable = true;
-    name = "Audio Hauptraum Küche";
-  };
-  services.mpd.musicDirectory = "smb://beamer:beamer@beamer.z9.ccchh.net/music";
-
-  users.users.chaos.extraGroups = [ "pipewire" ];
-}
--- a/config/hosts/audio-hauptraum-kueche/configuration.nix
+++ b/config/hosts/audio-hauptraum-kueche/configuration.nix
@ -1,9 +0,0 @@
-{ pkgs, ... }:
-{
-  networking = {
-    hostName = "audio-hauptraum-kueche";
-    domain = "z9.ccchh.net";
-  };
-
-  system.stateVersion = "23.05";
-}
--- a/config/hosts/audio-hauptraum-kueche/default.nix
+++ b/config/hosts/audio-hauptraum-kueche/default.nix
@ -1,8 +0,0 @@
-{ ... }:
-{
-  imports = [
-    ./audio.nix
-    ./configuration.nix
-    ./networking.nix
-  ];
-}
--- a/config/hosts/audio-hauptraum-kueche/networking.nix
+++ b/config/hosts/audio-hauptraum-kueche/networking.nix
@ -1,21 +0,0 @@
-{ ... }:
-
-{
-  networking = {
-    interfaces.net0 = {
-      ipv4.addresses = [
-        {
-          address = "172.31.200.14";
-          prefixLength = 23;
-        }
-      ];
-    };
-    defaultGateway = "172.31.200.1";
-    nameservers = [ "172.31.200.1" ];
-  };
-
-  systemd.network.links."10-net0" = {
-    matchConfig.MACAddress = "1E:EF:2D:92:81:DA";
-    linkConfig.Name = "net0";
-  };
-}
--- a/config/hosts/audio-hauptraum-tafel/audio.nix
+++ b/config/hosts/audio-hauptraum-tafel/audio.nix
@ -1,14 +0,0 @@
-{ pkgs, ... }:
-{
-  imports = [
-    ../../../modules/services/audio
-  ];
-
-  ccchh.services.audio = {
-    enable = true;
-    name = "Audio Hauptraum Tafel";
-  };
-  services.mpd.musicDirectory = "smb://beamer:beamer@beamer.z9.ccchh.net/music";
-
-  users.users.chaos.extraGroups = [ "pipewire" ];
-}
--- a/config/hosts/audio-hauptraum-tafel/configuration.nix
+++ b/config/hosts/audio-hauptraum-tafel/configuration.nix
@ -1,9 +0,0 @@
-{ pkgs, ... }:
-{
-  networking = {
-    hostName = "audio-hauptraum-tafel";
-    domain = "z9.ccchh.net";
-  };
-
-  system.stateVersion = "23.05";
-}
--- a/config/hosts/audio-hauptraum-tafel/default.nix
+++ b/config/hosts/audio-hauptraum-tafel/default.nix
@ -1,8 +0,0 @@
-{ ... }:
-{
-  imports = [
-    ./audio.nix
-    ./configuration.nix
-    ./networking.nix
-  ];
-}
--- a/config/hosts/audio-hauptraum-tafel/networking.nix
+++ b/config/hosts/audio-hauptraum-tafel/networking.nix
@ -1,21 +0,0 @@
-{ ... }:
-
-{
-  networking = {
-    interfaces.net0 = {
-      ipv4.addresses = [
-        {
-          address = "172.31.200.15";
-          prefixLength = 23;
-        }
-      ];
-    };
-    defaultGateway = "172.31.200.1";
-    nameservers = [ "172.31.200.1" ];
-  };
-
-  systemd.network.links."10-net0" = {
-    matchConfig.MACAddress = "D2:10:33:B1:72:C3";
-    linkConfig.Name = "net0";
-  };
-}
--- a/config/hosts/esphome/configuration.nix
+++ b/config/hosts/esphome/configuration.nix
@ -1,9 +0,0 @@
-{ ... }:
-{
-  networking = {
-    hostName = "esphome";
-    domain = "z9.ccchh.net";
-  };
-
-  system.stateVersion = "23.05";
-}
--- a/config/hosts/esphome/default.nix
+++ b/config/hosts/esphome/default.nix
@ -1,9 +0,0 @@
-{ ... }:
-{
-  imports = [
-    ./configuration.nix
-    ./esphome.nix
-    ./networking.nix
-    ./nginx.nix
-  ];
-}
--- a/config/hosts/esphome/esphome.nix
+++ b/config/hosts/esphome/esphome.nix
@ -1,7 +0,0 @@
-{ ... }:
-{
-  services.esphome = {
-    enable = true;
-    openFirewall = true;
-  };
-}
--- a/config/hosts/esphome/networking.nix
+++ b/config/hosts/esphome/networking.nix
@ -1,29 +0,0 @@
-{ ... }:
-
-{
-  networking = {
-    interfaces.net0 = {
-      ipv4.addresses = [
-        {
-          address = "10.31.208.24";
-          prefixLength = 23;
-        }
-      ];
-      ipv6.addresses = [
-        {
-          address = "2a07:c481:1:d0::66";
-          prefixLength = 64;
-        }
-      ];
-    };
-    defaultGateway = "10.31.208.1";
-    defaultGateway6 = "2a07:c481:1:d0::1";
-    nameservers = [ "10.31.208.1" "2a07:c481:1:d0::1" ];
-    search = [ "z9.ccchh.net" ];
-  };
-
-  systemd.network.links."10-net0" = {
-    matchConfig.MACAddress = "7E:3C:F0:77:8A:F4";
-    linkConfig.Name = "net0";
-  };
-}
--- a/config/hosts/esphome/nginx.nix
+++ b/config/hosts/esphome/nginx.nix
@ -1,73 +0,0 @@
-{ config, ... }:
-
-{
-  services.nginx = {
-    enable = true;
-
-    virtualHosts = {
-      "esphome.ccchh.net" = {
-        forceSSL = true;
-        enableACME = true;
-        serverName = "esphome.ccchh.net";
-
-        listen = [
-          {
-            addr = "0.0.0.0";
-            port = 80;
-          }
-          {
-            addr = "[::]";
-            port = 80;
-          }
-          {
-            addr = "0.0.0.0";
-            port = 443;
-            ssl = true;
-          }
-          {
-            addr = "[::]";
-            port = 443;
-            ssl = true;
-          }
-        ];
-
-        locations."/" = {
-          proxyPass = "http://${config.services.esphome.address}:${builtins.toString config.services.esphome.port}";
-          proxyWebsockets = true;
-        };
-      };
-      "esphome.z9.ccchh.net" = {
-        forceSSL = true;
-        useACMEHost = "esphome.ccchh.net";
-        serverName = "esphome.z9.ccchh.net";
-
-        listen = [
-          {
-            addr = "0.0.0.0";
-            port = 80;
-          }
-          {
-            addr = "[::]";
-            port = 80;
-          }
-          {
-            addr = "0.0.0.0";
-            port = 443;
-            ssl = true;
-          }
-          {
-            addr = "[::]";
-            port = 443;
-            ssl = true;
-          }
-        ];
-
-        globalRedirect = "esphome.ccchh.net";
-        redirectCode = 307;
-      };
-    };
-  };
-  security.acme.certs."esphome.ccchh.net".extraDomainNames = [ "esphome.z9.ccchh.net" ];
-
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
-}
--- a/config/hosts/forgejo-actions-runner/configuration.nix
+++ b/config/hosts/forgejo-actions-runner/configuration.nix
@ -1,10 +0,0 @@
-{ config, pkgs, ... }:
-
-{
-  networking = {
-    hostName = "forgejo-actions-runner";
-    domain = "hosts.hamburg.ccc.de";
-  };
-
-  system.stateVersion = "23.11";
-}
--- a/config/hosts/forgejo-actions-runner/default.nix
+++ b/config/hosts/forgejo-actions-runner/default.nix
@ -1,11 +0,0 @@
-{ ... }:
-
-{
-  imports = [
-    ./configuration.nix
-    ./docker.nix
-    ./forgejo-actions-runner.nix
-    ./networking.nix
-    ./sops.nix
-  ];
-}
--- a/config/hosts/forgejo-actions-runner/docker.nix
+++ b/config/hosts/forgejo-actions-runner/docker.nix
@ -1,16 +0,0 @@
-# Sources for this configuration:
-# - https://nixos.wiki/wiki/Docker
-{ config, pkgs, ... }:
-
-{
-  virtualisation.docker = {
-    enable = true;
-    autoPrune = {
-      enable = true;
-      dates = "weekly";
-    };
-    daemon.settings = {
-      ipv6 = true;
-    };
-  };
-}
--- a/config/hosts/forgejo-actions-runner/forgejo-actions-runner.nix
+++ b/config/hosts/forgejo-actions-runner/forgejo-actions-runner.nix
@ -1,66 +0,0 @@
-# Sources for this configuration:
-# - https://forgejo.org/docs/latest/admin/actions/
-# - https://forgejo.org/docs/latest/user/actions/
-# - https://docs.gitea.com/next/usage/actions/act-runner
-
-{ config, pkgs, ... }:
-
-{
-  services.gitea-actions-runner = {
-    package = pkgs.forgejo-runner;
-    instances.ccchh-forgejo-global-docker = {
-      enable = true;
-      name = "Global Docker Forgejo Actions Runner";
-      url = "https://git.hamburg.ccc.de/";
-      tokenFile = "/run/secrets/forgejo_actions_runner_registration_token";
-      labels = [ "docker:docker://node:current-bookworm" ];
-      settings = {
-        container = {
-          enable_ipv6 = true;
-        };
-        cache = {
-          proxy_port = 45540;
-        };
-        runner = {
-          capacity = 4;
-        };
-      };
-    };
-
-    instances.ccchh-codeberg-org-diday = {
-      enable = true;
-      name = "ccchh runner for codeberg.org/di-day";
-      url = "https://codeberg.org/";
-      tokenFile = "/run/secrets/codeberg_org_diday_runner_registration_token";
-      labels = [
-        "docker:docker://node:current-bookworm"
-        "debian-latest:docker://node:current-bookworm"
-        "alpine-latest:docker://node:current-alpine"
-      ];
-      settings = {
-        container = {
-          enable_ipv6 = true;
-        };
-        cache = {
-          proxy_port = 45541;
-        };
-        runner = {
-          capacity = 4;
-        };
-      };
-    };
-  };
-
-  sops.secrets."forgejo_actions_runner_registration_token" = {
-    mode = "0440";
-    owner = "root";
-    group = "root";
-    restartUnits = [ "gitea-runner-ccchh\\x2dforgejo\\x2dglobal\\x2ddocker.service" ];
-  };
-  sops.secrets."codeberg_org_diday_runner_registration_token" = {
-    mode = "0440";
-    owner = "root";
-    group = "root";
-    restartUnits = [ "gitea-runner-ccchh\\x2dcodeberg\\x2dorg\\x2ddiday.service" ];
-  };
-}
--- a/config/hosts/forgejo-actions-runner/networking.nix
+++ b/config/hosts/forgejo-actions-runner/networking.nix
@ -1,27 +0,0 @@
-{ lib, config, ... }:
-let
-  runnerInstances = lib.attrValues config.services.gitea-actions-runner.instances;
-  runnerCachePorts = lib.map (i: i.settings.cache.proxy_port) runnerInstances;
-in {
-  networking = {
-    interfaces.net0 = {
-      ipv6.addresses = [
-        {
-          address = "2a00:14b0:42:102::18";
-          prefixLength = 64;
-        }
-      ];
-    };
-    defaultGateway6 = "2a00:14b0:42:102::1";
-    nameservers = [ "212.12.50.158" "192.76.134.90" ];
-    search = [ "hamburg.ccc.de" ];
-  };
-
-  systemd.network.links."10-net0" = {
-    matchConfig.MACAddress = "1E:E0:4E:D0:DA:BE";
-    linkConfig.Name = "net0";
-  };
-
-  # open ports for runner cache proxy so that we can use the cache action
-  networking.firewall.allowedTCPPorts = runnerCachePorts;
-}
--- a/config/hosts/forgejo-actions-runner/secrets.yaml
+++ b/config/hosts/forgejo-actions-runner/secrets.yaml
@ -1,149 +0,0 @@
-forgejo_actions_runner_registration_token: ENC[AES256_GCM,data:gAR2ffrffeuuaOwO6mWcif2e6csKIVoLqrux19iBlrTkFHgo/IlHVL0eSUGqnw==,iv:i12yx/quwT9kj6fPECszo/iG9cVhKX+7dAA6/N09URc=,tag:eO+mWhumgvWzQxYqiRUXbA==,type:str]
-codeberg_org_diday_runner_registration_token: ENC[AES256_GCM,data:thTsLo/eXVPbXt4b8ldae+kGnOR4GbYKOqr1hVJgaL7wZ5GgqWSPcOuhow96Jw==,iv:Fzi+DsKj+4PrwQGEosUntm9l7s78NwzhkmF6e/sfF+s=,tag:oa7mnbGR0J5xi9ruCgRJtQ==,type:str]
-sops:
-  age:
-    - recipient: age19h7xtfmt3py3ydgl8d8fgh8uakxqxjr74flrxev3pgmvvx94kvtq5d932d
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjZEpMZkt6OU5nMEtYcHc0
-        OGdsVDZBcE5nK2ZLbDhaWEVMM2lJcllLVnlzCmNUTXpaVHBLMjlILzJwdDFLMVky
-        ZXdEVmE3aTFMZDJnQ2tqWGRMb1NnZUkKLS0tIDhGWGpoYWNtL24wRnVRejQ5ZkVN
-        YjZFMTh3OTNkOUE0SmZTQXpKSmdGWlEK+Xb6blAdiWoKvffLEQagu5tFpWALJaXm
-        F65M+RNNkJ/YsSJGAWFJepw3ncCMFbmQgGXw5XnyqTlYFhrQ8x5qJg==
-        -----END AGE ENCRYPTED FILE-----
-    - recipient: age10xz2l7ghul7023awcydf4q3wurmszy2tafnadlarj0tvm7kl033sjw5f8t
-      enc: |
-        -----BEGIN AGE ENCRYPTED FILE-----
-        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBQblJIdFAwOFRqbWEvQzVF
-        ODVpQ04xTVpxTERGU3BOMjV4KytBU21neEYwCmoraHhlNjhDelAzR0VxcVNlekhT
-        QkI5ckd1dVFjMHBoTVFTQjlzbTdnTzgKLS0tIGlTY1p0bWxrQWoyM0RwSmx1aDhy
-        TklLZWM0cDBKaGJJM2tQQWRLZXhFYU0Ko7cyvzMvwlGCCP3UAX1+5uTI4srhZ5l9
-        DPaHySiC+rLy+8R9UqEuTKbP4/Aw4NZ/UcfjNnVkqqqNJIODmLoOhg==
-        -----END AGE ENCRYPTED FILE-----
-  lastmodified: "2026-02-18T09:51:37Z"
-  mac: ENC[AES256_GCM,data:4fWsE3U6WxRqlKHKC4ipE+RQ7MPjiZZcTFMSblxty7JjJHAdKUHbthFB+R8gIWxZEjX5WG+IPgUP+AcCLSI9fdcXMqIFMuDun2hiktwqxzLPGYAoCXdTBAd1uCUagvB/rFty6y8umD4J5ITgEGba9pvGdUcng9WVRV+LGDftS1g=,iv:tD9tlcylQWapNCARxPXrKofZXf2BHTt2c4PQqFNj6X8=,tag:pQ8lOqJEFCcCcJot3BYTmQ==,type:str]
-  pgp:
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMAz5uSgHG2iMJAQ/7BFboCbCEG1DY5Twf+1cRSAmXs8CSrnoJcmyxrF9daqTB
-        GAqItZcym6I7YbtYMb33jTZDAMFcexvJ+V7+WVBK/v/TISzinJ3m5BafE0DrgsB5
-        HQT8tsFzxIdu/KsUp0C5VQg6gsb2u2T7aFG0wTS4vas2FjcsoJRKNWTv7a1sNWYZ
-        dFRxeyklWEX14kCHeKIxO7+Qe3NVV+6MuwYR8X3YJaAyLtVMIdBp/poE+7Gcsa58
-        rOewheWW/FROTxLZIk3sren6z7M0ZrOz5res2evRDMI9noN3pYMnkNCL/XIvRf9U
-        GqFSruzDoC0a2JcEvSmthSmEHA6wXeOY/EuzXKLoW4luZDsSXshFgBxK0qqGvzbd
-        jIXXYvBWPCMYWRMSqQenLkjfhOQXuSXcywGfKpuQblUL8RiflIqia2o68Vbd9Hq4
-        x9Od+qkauMHZUzsKQoym9pkbrEWpjckg6FevZ1W4o5Qhe9i+JMmE2KIvoYH8tK9F
-        5KQ87jktx4i9df9TJy3n/xbbrWXpo76y5Aoa2LaiD9Nc6lo7sFs3Pegq4wKmYSIh
-        6uaZxa5sto/5kywHrJQGqEyh/fDdNmsh5FlDW7gfFEm9Ti2KSE3m9IvIwppFD4j0
-        xFkHiwHvNn/WMLciVh9qG8auGyxjoXnRRx61QHF31RIYprxWgDoyH/rVz95IuxzS
-        XgEIJk7MnHv9tYCy/lOjbgqLAUGO0+xuO+IfmsvtiD4nfrnaEJAh0+SW3wuCKzaF
-        tx1ZHCYH9j3s50Q624pUgtzDad5QV5IIEgCRyr0NvEvrXvG6U0aXkOEbOcFSZsk=
-        =v3FY
-        -----END PGP MESSAGE-----
-      fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMAw5vwmoEJHQ1AQ/9H+Kn4rF7yUsIdTp5rYhG6EkYkJ/jCeUBJvaOuA95b8HM
-        6csTXj+ttVcFvbU1hQVbOsd7J8Wpmuj/TqMrpFvu/0EYUW5n04y1YI8kpNXDMrFF
-        X/0gk+I+w2eF2X3gJQasVY39DNx56KSRJ0BwGYw287rdeKh8cbiFw64r0rs6zX5j
-        2nqrWgSqxXtWcjhC7Y4Rq8ysWv7dEF2E9Tt2cHYVjn5cs9Vb52PWUA0TxzBzUUqa
-        M1YWat3fwLah6qEs6/9c89LB66SbgH088lEzQHtRIXdOZ9tPOu7/E3iNqYExuIKB
-        eMV0bdW0/tZlnWxAwXrL4rptxjGDqB+Ynv36IeLKZ86ljqSPqaQA7ihCVXnMo2TW
-        IfdlbOtAJiE3IliQf8C1Ajyn32epePBAUyw8o0k2D6UyNyvk8fe0z9++H6Uz+Z7G
-        oLRrxzOHjh6oWK9WBwJQhZ9dnb1n1UYZfvCDwFZBTmUkhIs6UQllIiF5ZjMy4/cc
-        E3FEouu/6VPPjq9d8pGEFcjOvXkLtUErhXP+A8Xvl/fHmtfM0/o1e6gPnMmxGn4k
-        0yXvU+pNO/ID6fc6qMs0nBZRAKGraaeH+wTjpm1exUhhNB2yJviySnElJFyq9vtr
-        AfacrbuW//JQ+19rSKViV9xStRG//xfW7EpknOh3juB7WfnyOXqdfZqT2zQwrvjS
-        XgEoHXmbR7aiDvBCc4CGTmBhWD4An+p3m3m7iSOp27kBqJ3+YSKdVA7mdIo0tpTn
-        9p5Pgz6GHBA5eMwZCb/z3Y7+20PuuEb4/tEBAniw9/Rp0sDJ+9C+V1SdHtbYq8k=
-        =kkQW
-        -----END PGP MESSAGE-----
-      fp: 87AB00D45D37C9E9167B5A5A333448678B60E505
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hF4DerEtaFuTeewSAQdAdgME/v0CVfcRZ1zr9SRZksN7vDHDk63g+5k5a/FOvmow
-        0l/6kH1l7p4aOKaAGFbMHzDzljuACB1a4IOJypRA2DokYWRUgqBKwvcHplgXr4l0
-        0l4B2vxPl9W1kcbAg4m+V4PlvXTBGhPUglljtjWy80TisUL1zCXpl3PEvmrypZs7
-        NM47K09RsDiicwTKjxd0Oii2Evz8riLFIth8IWOKXPHoKhiYwN891g1qLSvsrDzE
-        =6B/b
-        -----END PGP MESSAGE-----
-      fp: 057870A2C72CD82566A3EC983695F4FCBCAE4912
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMAxjNhCKPP69fARAAjz8RObyKYVAmNwiBsNVNGt0qSIexSYpsMR5SyuBMKShJ
-        NSD4yA6B7Tj+h/ik4VyggOT+9Qfr7zFvFyEHYFXI7k/r+Noyw4uscqr9gNnz0t9N
-        rx4/ZNowsW/3dL+Gab3hjDKObHF41Y1lzojNwcieU8qZmssHZMjIIzyAUePL210f
-        2i87hix9PkK6kKuisORDShnFifEOEPOcijXFL4kH9DilVoZ0Ut5fJoiA+QkQQpaa
-        uHd+Q7F6u9jZrzRLN1SJkb76ElxQAvJYcgTN2s3+c4002DkKVdwCW0qyPlF9wOxT
-        xTngl46NyZ1MH3ByW2xeOgaDYUcBt8qUF4gTMmIaDTIZ+K5XWGu3hmCzNZHD5Nxi
-        bhVKJ8jGENUhM/IfT8CjppRIg5wwU0K/EQE/QQHhIykpz9NaIjikDCxcraBa9DkA
-        rgjp74W9vgR3pBwXJIAsylOZZHy+35rca/JvWWxm2tdeao2WxTA9jdsNdsUOhNyz
-        3xQGGM63ZSUcV0ZgCyhEYeKBzCyRWpFX+GQHboZDp7IaYK68qYZgxnQtoSwl3lJR
-        Qc1IaADnncIDyGEIDTciLbjbDx7TId4wrpRWUPxVY2FVY+hV+oRNaoYMuT2jiDVw
-        PimQ5iVUhl/ThHWPLqok6d3ypROZtVS6EUFzd4ASUrYRYB5Twvoujr7Yg7jSZV/S
-        XgFcxQ31/i/Vi9owjwX7u0/eclU/3XE2/MqUCcoMntnq2dCN/IpF3rROit5Tzs+W
-        BT7i57cpGh9ZXf1dbNSyRwydp/C8tjnwDqf3RJ5hj4fmlK6zLJqtPFPdusOO4SU=
-        =z1tc
-        -----END PGP MESSAGE-----
-      fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMA1Hthzn+T1OoAQ/+K1+QTZ8N3Ha0nErrRWClBu5Cxec5/eb2Q/n4dfNGkrxx
-        xBk0thoGAyoYpifSqhXbVi/MA8+tzHdtPlKJFCn5NETrnEdu84+sJQE4zfDljLiX
-        fXZZ/+YQ0P3VosR2NI3W1r/hJWs4oJ9oPz4FfMlfPK+/UOOdQEtGkx9rjYaus9Ax
-        VI6s5qvYM6XD5rkLxTqZZhEa+CjLtSjD5WqNbCT/8fX5ErnU06jW6jXvRNQSq1Mt
-        hpqMIBygUE39K2apEuphE9RRD3bS1M2VjCB882yVSM2QZyepilRBjS5ryyQhKK/9
-        Q0mdIw9mxhdgaCzoglN2k1c6WjddZ409osdnYcMtsH4+NlHDtNfSFLIk6JrxAXIQ
-        bNR8gtr4D85LoQki/RvEweUd4M40DneIO1dTK4/WG71Lcle3B6p0ynDMjmXq1coY
-        Qn0c4KAh1RIX/eEJGS23Wle/XZbp89yaFFEF667+HmwL0CY6I5pcVEn/iuXLoNHI
-        93y/9h7mhB8ZGICPbF7nXBfQQTrxjfc9vZq0PVdjlXPIMRjZcbZOzlKByYLsQIW0
-        UtzLScfFyKsogcUGJIlGrcQyAmLb3dr7i1elVWlanggCXdKnecBRbSkEfK7SmwiN
-        t8hRaaM06P3kRbTHWxt+4sjTQWofo+C76qsMZYHFpI0TTOP/jwnn/h3E9dQxdaHS
-        XgHzVEsJkQiQ51w7pPP1LcKkCxQv1KA9QC+LAFGhmWXnQ1m8E3whao2S07UjlTVw
-        XMAtuOVT2r09dYGgpcEaMiK2Hb9UNg/ma9o29fSm+2rLuxw3qSldgNNx/s8hyzc=
-        =0kev
-        -----END PGP MESSAGE-----
-      fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hQIMA46L6MuPqfJqAQ//ZYw2qRn+YhiEoBpbUsW95NJpZJFizwssh1dC/Lda5qFs
-        55G1Jls9FHHQ+LmRnE6wyx26bbpQ257FNzCsxsfwAuiznx31j1yHc6LZbuJ3+DsJ
-        slRaad13RdLyGgo2psaXbBMEgr22FAFDm+S98aYnyv8yvtOZvutEljGm9yhHLGKy
-        XnFf8LwvvqdT4RolfxiPncGsd9hbFYZh7/zcJTSzfYSnHI30Ly5Na74vSaamuIwR
-        oPnSxlf8jIX5RUzssjyOHGLQLd327fKuveVxX9CUK/PGWLgQYuTL5PWZwQGhzgSY
-        E+2EerpGLVJzSQB0TUU5xGwOQkDlPveSSUg0IoDlivMnrphWUFd+bcIMbipVXolf
-        qpiJeO1t0YW1WAQBzkQ3J+uXgX0dJqWfzfMsbn3j4/WZq5ZlEX6x+ovHv6Z7ZXTz
-        6lcF6Gn0dH/omhkqduK3bLwBWAkmh7gWNssEXdPQWGWA8j3WM+IPZKIegpecflKN
-        pv7jOyD95othMUul/iiH/E3aSbCggN5maoZHG2Cp1TGXkGOLFCNs143LGTVligOU
-        yD8n0uAQ8e50J7YwytSi2g0pzFkZyriLmrZqKFt9UUOfANivrO9p8J0Bo9wEHjY0
-        OdKKu8ASgjYk0t4VHGeZF3GPSaGE/k7LaUb9+5t02sxypxeVqQXpvjU/D8c/0wPS
-        XgGQs2bjszJIyRwcTmUHD8YAvuxf0MkyKCKpJSsnbJ4XmgkI+gGQpg0GLQROXjZ4
-        8GqLzKb+3d3QDUPQmh+z5Ur1nFcVS214wycICWSTsIUyam59+4rVxV1i33DcAs4=
-        =BJfi
-        -----END PGP MESSAGE-----
-      fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
-    - created_at: "2026-02-17T22:21:57Z"
-      enc: |-
-        -----BEGIN PGP MESSAGE-----
-
-        hF4DQrf1tCqiJxoSAQdA7rerN+IVKpzyAdXVuAN19+CIjQ6DnHatGr92/YhAEiQw
-        J913tdR+Yb/FdPWQrn0NR2eTUuKm/Es0NRvJY/YEnhQble+3qYvxFP6dI+vm1cmz
-        0l4BNxMhGqyOmsDFf58yrJmrHdnapBOmiqCkJBTc9gAQH534di0Ps+grV04jzkXW
-        DUO/sIPANPpvqqCJNt1uekKNH2J57OMaagnBTivMBTq0HAuRN1RhcrjGof9ttCj1
-        =desh
-        -----END PGP MESSAGE-----
-      fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
-  unencrypted_suffix: _unencrypted
-  version: 3.11.0
--- a/Show more
+++ b/Show more
Author	SHA1	Message	Date
June	ac8e98d1d8	remove mqtt host	2026-11-02 19:31:42 +01:00
June	3a7ce982d7	update pnpm deps hash for element admin to make host build	2026-11-02 19:26:19 +01:00
June	fea8db12a4	flake.lock: Update Flake lock file updates: • Updated input 'authorizedKeysRepo': 'git+https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys?ref=trunk&rev=8b7662703635ff7e80b2ee72ce052201fa86010a' (2026-03-06) → 'git+https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys?ref=trunk&rev=d77a10a2f0f646c6741133c317b06a90425a0e13' (2026-10-31) • Updated input 'nixpkgs': 'github:nixos/nixpkgs/7c8764b7c7b09b34f632464276218ef9090eaa11?narHash=sha256-MWhktfFtFE8Jl7bf9Pkp7TR5MSdYCjCswSo0Gkb4ywc%3D' (2026-10-08) → 'github:nixos/nixpkgs/9bb52223f4f6a0cc606fd0852d8784f896c137d5?narHash=sha256-2Cxxgpz1%2BcRgKZJFi12/9LG3aIBN66f2RvFs34Oj/A0%3D' (2026-11-01) • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/39ad350a0602fa0a58a544344e3e9187526ea45c?narHash=sha256-o0N4g6uSOIppU7CGToNvGlMf5vC%2BB6O6ukFHKY/TKOY%3D' (2026-10-07) → 'github:nixos/nixpkgs/5c9de89ec55bff981cb8da1a4ee92b10f1438ffc?narHash=sha256-WDValiY9se78X2Wh7aWWaq/c7HN29U555%2BOKbHEzYrw%3D' (2026-11-02) • Updated input 'sops-nix': 'github:Mic92/sops-nix/dcd241ba97088c22569d1573286e1b9daad340c0?narHash=sha256-nFxM%2BpKoZ8LJAEnUXARyCaOAloWgaW9kZQOSjWzKcTE%3D' (2026-10-04) → 'github:Mic92/sops-nix/60182817ee048ac94b4c68ea76d5ef2e8aac730d?narHash=sha256-Y/JIHTnMlOabDfyaSBubWGLDIVGihLEUuoMhFvQKaDo%3D' (2026-10-26)	2026-11-02 18:58:29 +01:00
chris	f418fb7087	ptouch-print-server: change to new ip in client net for now	2026-10-10 23:50:12 +02:00
chris	910b861faa	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs': 'github:nixos/nixpkgs/cf5e76507c6e23b59f7e0ffcc7baa2a39ddd8442' (2026-09-27) → 'github:nixos/nixpkgs/7c8764b7c7b09b34f632464276218ef9090eaa11' (2026-10-08) • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/419fe0f449b3fbe3bdd53d9840288db4509ec32e' (2026-09-28) → 'github:nixos/nixpkgs/39ad350a0602fa0a58a544344e3e9187526ea45c' (2026-10-07) • Updated input 'sops-nix': 'github:Mic92/sops-nix/5efb5a6f4f5ab192817d28557dd4d650fa14d866' (2026-09-27) → 'github:Mic92/sops-nix/dcd241ba97088c22569d1573286e1b9daad340c0' (2026-10-04)	2026-10-09 23:40:14 +02:00
chris	edb7e569ef	update spaceapid to v0.2.0-rc2	2026-10-09 23:20:32 +02:00
June	0dbf7fd348	public-web-static(host): switch to spaceapid v0.2.0-rc1 and SpaceAPI v15 Switch to spaceapid v0.2.0-rc1 and support SpaceAPI v15. Add additional location information and links to our projects.	2026-09-29 02:47:52 +02:00
June	9d5fd9da7f	public-web-static(host): update element-web and element-admin element-web: 1.12.18 -> 1.12.29 element-admin: 0.1.11 -> 0.1.14	2026-09-29 02:02:05 +02:00
June	19508405c1	ptouch-print-server(host): make forcecommand-lpr-wrapper build again Make forcecommand-lpr-wrapper, and therefore the host, build again.	2026-09-29 01:51:02 +02:00
June	47fcc72214	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/6b5e5b7a6631f065bf6908986990b37d845f847f?narHash=sha256-smTKQXMLLStzc8zJevMCckbk3My7SvbbLmPYZUJJKW4%3D' (2026-08-13) → 'github:nixos/nixpkgs/419fe0f449b3fbe3bdd53d9840288db4509ec32e?narHash=sha256-Avcz96Q%2B8OkfUIUXipBBVsQn19L622BtKP7mk6M%2Buls%3D' (2026-09-28) • Updated input 'sops-nix': 'github:Mic92/sops-nix/a8627b21b9107c5711c96b84f32a9a4b3d45295f?narHash=sha256-gkig4nPi1CWc4Z50GBsjE4ygSE7hMpl/TwID2an2Cck%3D' (2026-08-13) → 'github:Mic92/sops-nix/5efb5a6f4f5ab192817d28557dd4d650fa14d866?narHash=sha256-rs9meAYxW3zzrh43yaW7htrqCD%2BX9%2BpupDPHN86fumI%3D' (2026-09-27)	2026-09-29 01:41:10 +02:00
June	58ed5acb95	Upgrade to NixOS 26.05 (for all hosts)	2026-09-29 01:39:51 +02:00
June	726dab1ccf	public-web-static: add configuration for www.didays.de redirect	2026-09-28 21:41:17 +02:00
June	c11128ea4d	synchronize admin keys with ansible-infra and use SOPS merge Synchronize admin keys in .sops.yaml with ansible-infra and make use of SOPS merge feature for organization.	2026-09-24 20:45:22 +02:00
June	03e37aad72	public-web-static: add configuration for bildungsurlaub.hamburg.ccc.de	2026-09-21 21:37:58 +02:00
lilly	9fad3ac91d	remove obsolete hosts from config	2026-09-20 00:17:19 +02:00
lilly	5cc6f16e48	update nixpkgs-26.05 flake input	2026-09-20 00:10:25 +02:00
lilly	8e59a85c6e	update nixo2605 flake input	2026-09-18 11:11:25 +02:00
lilly	ef759b4c0c	increase matrix request-uri max size	2026-09-02 14:59:07 +02:00
chris	ed89e6263c	git: fix git disable download function	2026-08-14 21:59:03 +02:00
chris	8e8b465eca	flake.lock: Update Flake lock file updates: • Updated input 'nixpkgs-2605': 'github:nixos/nixpkgs/fcb8fcd6bf2d0adecae5bd491afaaaf8311b758d' (2026-08-09) → 'github:nixos/nixpkgs/9f78f44a87948854445dae0b6bf82b2e87e4efb5' (2026-08-12) • Updated input 'nixpkgs-unstable': 'github:nixos/nixpkgs/d482ef84049d9b7276b83a06e4e4d76983830097' (2026-08-10) → 'github:nixos/nixpkgs/6b5e5b7a6631f065bf6908986990b37d845f847f' (2026-08-13) • Updated input 'sops-nix': 'github:Mic92/sops-nix/d1337e05ba0a8e88a75d2c0e1595d82f3b3e2ac4' (2026-08-10) → 'github:Mic92/sops-nix/a8627b21b9107c5711c96b84f32a9a4b3d45295f' (2026-08-13)	2026-08-14 21:31:10 +02:00
lilly	309c763d15	update git to nixos 26.05	2026-08-11 21:20:45 +02:00
lilly	b167ee51b9	fix permission mistake in spaceapid config	2026-08-11 15:59:13 +02:00
lilly	876fdbc4dd	rename "dooris-hauptraum" credentials to "dooris" in spaceapid	2026-08-11 15:27:33 +02:00
June	61cf87f12b	deploy didays.de and didays.de staging on public-web-static	2026-07-09 21:14:09 +02:00
June	8d41dcf7ca	remove forgejo-actions-runner (replaced by ansible-infra host)	2026-07-03 04:10:27 +02:00
lilly	0f22b1158e	move ueberwachungsfrei kundgebung page to own domain	2026-06-11 14:58:07 +02:00
lilly	121dd0a1ec	add ueberwachungs-frei kundgebung site	2026-06-09 21:42:27 +02:00