Use new format for deployment.keys.

Just let's use ".text = key" right now without setting permissions and
correct those later as we see fit.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
domains: Add ipv4/ipv6 for miscellaneous domains.

This only has a reference at the Nix expression level called "misc",
which I intend to use for personal stuff.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
chromium: Autoupdate with full nixpkgs tree.

The refactored Chromium update script is now relying on <nixpkgs> for
some functionality, so let's simply update the full nixpkgs tree here,
even though we only build the Chromium channels.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
site: Add closing </head> tag to index HTML.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
vhosts: Don't make fqdn option mandatory.

Helps especially in xmpp.nix, because we need to iterate over all FQDNs.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Fix handling of keys in test cases.

For real deployments, we still have deployment.keys, where we could set
owner/group permissions directly on the respective file. However, for
tests we generate snakeoil SSL keys where we really don't care whether
they're exposed.

So for tests, this means: Add all users of the services we're testing
and which are using keys to the keys group.

Also, as /run/keys became a ramfs in the meantime, we don't have POSIX
ACLs available anymore, so no 'setfacl'ing anymore ;-)

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
tests: Disable packet filtering for all machines.

It's really getting annoying setting firewall.enable = false on every
damn deployment, grr...

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
hydra-slave: Remove deployment.alwaysActivate.

We only want to set this on a per-machine basis, not for every Hydra
slave.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
hydra: Update submodule to upstream master.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>