MantisBT - Issues

0000367: Protect all systemd services

Sun, 27 Sep 2026 22:27:01 +0000

Timers and dependencies also need to be checked independently
```
UNIT EXPOSURE PREDICATE HAPPY
tinc-Immae.service 9.6 UNSAFE 😨
git-daemon.service 9.6 UNSAFE 😨
saslauthd.service 9.6 UNSAFE 😨
stunnel.service 9.6 UNSAFE 😨
proftpd.service 9.6 UNSAFE 😨
zrepl.service 9.6 UNSAFE 😨
ympd.service 9.6 UNSAFE 😨
sshd.service 9.6 UNSAFE 😨
cron.service 9.6 UNSAFE 😨
mdmonitor.service 9.5 UNSAFE 😨
container@httpd-integration.service 9.4 UNSAFE 😨
container@httpd-production.service 9.4 UNSAFE 😨
httpd.service 9.3 UNSAFE 😨
milter_verify_from.service 9.2 UNSAFE 😨
spiped_redis.service 9.2 UNSAFE 😨
opendmarc.service 9.2 UNSAFE 😨
imgproxy.service 9.2 UNSAFE 😨
ejabberd.service 9.2 UNSAFE 😨
commento.service 9.2 UNSAFE 😨
openarc.service 9.2 UNSAFE 😨
tt-rss.service 9.2 UNSAFE 😨
surfer.service 9.2 UNSAFE 😨
naemon.service 9.2 UNSAFE 😨
paste.service 9.2 UNSAFE 😨
wwsympa.service 8.9 EXPOSED 🙁
mediagoblin-celeryd.service 8.8 EXPOSED 🙁
cryptpad-immaeEu.service 8.8 EXPOSED 🙁
mediagoblin-web.service 8.8 EXPOSED 🙁
diaspora.service 8.8 EXPOSED 🙁
dbus-broker.service 8.7 EXPOSED 🙁
sympa-archive.service 8.6 EXPOSED 🙁
sympa-bounce.service 8.6 EXPOSED 🙁
sympa-task.service 8.6 EXPOSED 🙁
sympa-bulk.service 8.6 EXPOSED 🙁
sympa.service 8.6 EXPOSED 🙁
terraforming-mars.service 8.2 EXPOSED 🙁
codenames_api.service 8.2 EXPOSED 🙁
taskserver.service 8.2 EXPOSED 🙁
bitlbee.service 8.2 EXPOSED 🙁
nscd.service 8.2 EXPOSED 🙁
epmd.service 8.2 EXPOSED 🙁
openldap.service 7.1 MEDIUM 😐
etherpad-lite.service 7.0 MEDIUM 😐
mpd.service 6.9 MEDIUM 😐
postfix.service 6.1 MEDIUM 😐
fail2ban.service 5.8 MEDIUM 😐
stargazer.service 4.8 OK 🙂
ntfy-sh.service 4.0 OK 🙂
mysql.service 4.0 OK 🙂
dovecot.service 3.5 OK 🙂
mastodon-streaming.service 2.7 OK 🙂
mastodon-sidekiq.service 2.7 OK 🙂
mastodon-web.service 2.7 OK 🙂
peertube.service 2.7 OK 🙂
dhcpcd.service 1.9 OK 🙂
rspamd.service 1.7 OK 🙂
bind.service 1.5 OK 🙂
redis-php-sessions.service 1.3 OK 🙂
redis-peertube.service 1.3 OK 🙂
postgresql.service 1.3 OK 🙂
redis.service 1.3 OK 🙂
galene_lfoc.service 1.2 OK 🙂
opendkim.service 1.2 OK 🙂
galene.service 1.2 OK 🙂
coturn.service 1.1 OK 🙂
```

0000370: Close unused webapps

Sun, 27 Sep 2026 09:49:02 +0000

0000369: Bound paths are not updated

Sun, 27 Sep 2026 09:48:31 +0000

For containerized systemd services, the BindPaths / BindReadOnlyPaths entries are "frozen" to their value at the time where the service starts.
- For instance if redis is a dependency of the service, when it restarts the runtime directory gets deleted and recreated, but the container keeps the old value
- Similarly /etc mounts are not kept
- Same for secrets values

To be checked: /run/redis-php-sessions, /run/postgresql, /run/mysqld, secrets, /etc, /run/current-system

0000368: Transmit OnFailure from containers

Sun, 27 Sep 2026 09:45:24 +0000

e.g. librezo-matrix

0000366: Replace sendmail by smtp

Sun, 27 Sep 2026 00:48:05 +0000

Also implement a "local delivery with retries" for situations when postfix might be down

0000365: Cleanup shellchecks in Makefile

Sun, 27 Sep 2026 00:46:09 +0000

0000364: Put scripts from ./scripts in devEnv / apps.

Sun, 27 Sep 2026 00:46:09 +0000

0000363: Repair "make nur"

Sun, 27 Sep 2026 00:43:34 +0000

0000362: Format and check code

Sun, 27 Sep 2026 00:42:37 +0000

Use treefmt-nix and implement a "make check"

0000359: Add daily cron from journal logs

Sun, 27 Sep 2026 00:41:22 +0000

0000361: Replace buildbot by nixbot

Sat, 26 Sep 2026 22:34:46 +0000

To be analyzed:
https://github.com/Mic92/nixbot/tree/main

0000360: Migrate testmail activationscript to tmpfiles

Sat, 26 Sep 2026 22:34:03 +0000

0000358: Make a pass on what can be monitored in various services / websites

Sat, 26 Sep 2026 22:31:20 +0000

0000357: Add monitoring for list-units --failed

Sat, 26 Sep 2026 22:30:39 +0000

0000356: Make regular cleanup for mastodon

Sat, 26 Sep 2026 22:30:00 +0000

https://github.com/johndotpub/mastodon-maintenance/blob/main/clean.sh

0000355: Nixify sympa configuration

Sat, 26 Sep 2026 22:29:20 +0000

0000354: Migrate discourse launcher to nix

Sat, 26 Sep 2026 22:27:48 +0000

In Zoldene

0000353: Add plugin for kanboard

Sat, 26 Sep 2026 22:27:08 +0000

https://github.com/creecros/MetaMagik

https://github.com/Tagirijus/AddSpentTime

0000352: Add cronjob for kanboard / kanboard farm

Sat, 26 Sep 2026 22:26:17 +0000

https://docs.kanboard.org/v1/admin/cronjob/

0000102: Logrotate httpd logs

Sat, 26 Sep 2026 22:23:30 +0000

0000143: Make a script to restart replication from scratch

Sat, 26 Sep 2026 22:22:55 +0000

Make a simple script to restart replication from scratch rather than doing the manipulation by hand

0000146: Dovecot file layout prevents some configuration

Sat, 26 Sep 2026 22:22:28 +0000

For instance, it is not possible currently to store E-mails in `Folder` and `Folder/Subfolder`, due to the layout used by dovecot (single file layout).

0000136: Nextcloud bulk update is buggy

Sat, 26 Sep 2026 21:50:51 +0000

Issue is described in https://help.nextcloud.com/t/syncing-client-crashes-with-network-error-99/149047/23

Current workaround: add `'bulkupload.enabled' => false,` to nextcloud’s config.php

0000300: Nextcloud throws CSRF errors

Sat, 26 Sep 2026 19:29:28 +0000

Similar issue, to be reopened:
https://github.com/nextcloud/server/issues/40626

0000029: ActionList not updated

Sun, 02 Nov 2025 22:02:28 +0000

The action list is not updated often enough and may lead to actions remaining "pending" while they are finished