nixos-servers

home/nixos-servers

Fork 0

Commit graph

b189d061cb encrypt secrets with all machines' and admins' public keys closes #32 Pim Kunis 2024-01-08 21:46:40 +0100
0d150b3236 move age keys to /etc closes #33 Pim Kunis 2024-01-08 20:47:12 +0100
aba16d3fd1 restructure modules Pim Kunis 2024-01-07 23:06:27 +0100
11ec763244 remove hermes virtual machines Pim Kunis 2024-01-07 22:39:34 +0100
54d5f6f5dc enable dnsmasq for DHCP and DNS allow setting static ipv4 address on DMZ Pim Kunis 2024-01-07 22:36:26 +0100
d4301bf7cd unbloat geokunis2 dns Niels Kunis 2024-01-07 20:42:07 +0100
fcf6864b77 Merge branch 'master' of ssh://git.kun.is:56287/home/nixos-servers Niels Kunis 2024-01-07 20:31:17 +0100
62bbc7c13d use dns.nix voor zone file generation Pim Kunis 2024-01-07 20:24:12 +0100
a152cde165 add authoritative DNS server Pim Kunis 2024-01-07 18:14:44 +0100
d92f27bd03 don't manage database permissions in nix closes #24 Pim Kunis 2024-01-07 16:26:11 +0100
914d84ef23 encrypt borg repository also backup to AWS EC2 instance Pim Kunis 2024-01-07 15:57:30 +0100
2804e764f5 merge modules into one storage module Pim Kunis 2024-01-07 00:22:44 +0100
997d9bb0cb create terraform project to setup libvirt on hosts use SATA drive for atlas OS remove thecloud legacy project Pim Kunis 2024-01-06 23:56:00 +0100
7c7b3e667b swap disks on jefke fix freshrss NFS volume mount point remove freshrss extensions volume disable vpay node in docker swarm Pim Kunis 2024-01-06 23:07:54 +0100
10dbccae97 create top-level switch whether a machine holds the application data Pim Kunis 2024-01-06 21:45:18 +0100
97fc20e251 backup nextcloud and hedgedoc database using borgmatic expose database passwords using agenix install lsof and parted Pim Kunis 2024-01-06 20:17:45 +0100
fc2da07613 update borgmatic config to backup btrfs subvolume Pim Kunis 2024-01-04 22:52:31 +0100
70d068b9ae remove obsolete code Pim Kunis 2024-01-02 08:33:21 +0100
837ddf14e1 fix freshrss nfs volume directory remove freshrss extensions volume install lsof and parted Pim Kunis 2024-01-02 08:27:12 +0100
5884585b3a migrate data from thecloud.dmz to lewis.dmz install tcpdump Pim Kunis 2024-01-01 13:16:11 +0100
3981805a6b add experimental module for data sharing on hypverisor Pim Kunis 2023-12-30 21:13:48 +0100
d9f697d171 add possibility of DMZ connectivity on hypervisor Pim Kunis 2023-12-30 16:11:28 +0100
0518fb5949 create module for networking Pim Kunis 2023-12-30 15:20:16 +0100
989ef332bb disable password logins by default in VMs restructure terraform database module Pim Kunis 2023-12-30 14:34:21 +0100
c16d217bb5 ms record voor kun.is -> inbucket Niels Kunis 2023-12-29 21:42:14 +0100
7222254c22 cleanup nixos modules a bit Pim Kunis 2023-12-29 13:46:12 +0100
1f5d121fd0 restructure nixos modules Pim Kunis 2023-12-29 13:41:01 +0100
ace5df1b43 restructure documentation Pim Kunis 2023-12-29 12:51:42 +0100
6d258fe5ae restructure code Pim Kunis 2023-12-29 12:47:59 +0100
c2b8131adc move NFS and database definitions to thecloud project Pim Kunis 2023-12-29 12:31:33 +0100
bf178f61c8 don't manage syncthing configuration using Docker expose syncthing config on NFS Pim Kunis 2023-12-29 12:11:53 +0100
36b2b48692 disable automatic updates attempt to fix kitchenowl hosts again Pim Kunis 2023-12-29 11:03:13 +0100
dbf84c7f93 create NixOS module to periodically backup data using borgmatic Pim Kunis 2023-12-27 19:14:49 +0100
96399c3809 update kitchenowl Pim Kunis 2023-12-27 15:13:48 +0100
349fead960 remove uptimed closes #22 Pim Kunis 2023-12-26 17:43:13 +0100
4278db3000 let nix manage firewall closes #20 Pim Kunis 2023-12-26 13:44:59 +0100
5a2f4d4696 removed files.geokunis2.nl from dns Niels Kunis 2023-12-26 13:27:15 +0100
26dce9da44 remove kubenix deployment example Pim Kunis 2023-12-26 12:47:15 +0100
7e651545cd move all custom ansible roles to this repository Pim Kunis 2023-12-26 11:34:24 +0100
9191405067 Add legacy/projects/thecloud/README.md Pim Kunis 2023-12-26 10:12:08 +0000
18832b88fe Add legacy/projects/docker_swarm/README.md Pim Kunis 2023-12-26 10:08:29 +0000
f3729e0545 Add legacy/projects/hermes/README.md Pim Kunis 2023-12-26 10:05:31 +0000
7ffefdaf27 Update legacy/README.md Pim Kunis 2023-12-26 10:03:42 +0000
bc248ea688 Add legacy/README.md Pim Kunis 2023-12-26 10:03:06 +0000
111bf68a0a manage lewis with nix move docker swarm ansible to this repo move thecloud ansible to this repo support data disks in terraform Pim Kunis 2023-12-25 19:22:22 +0100
d7ef46b642 extern ipv6 van opsense ge-update nav Glasnet migratie Niels Kunis 2023-12-22 15:07:09 +0100
ee3de2feed dnsmasq Niels Kunis 2023-12-22 14:31:26 +0100
87b300f22c switch to glasnet todo: opnsense zelf heeft nog geen ipv6 Niels Kunis 2023-12-22 13:12:37 +0100
304a3bbe34 replace powerdns with BIND Pim Kunis 2023-12-17 17:41:31 +0100
721623c8fc update to nixos 23.11 enable static IP for terraformed VMs restructure legacy code move hermes code to this repo don't use data disk for hermes leases Pim Kunis 2023-12-17 16:22:22 +0100
04e9ce3abb create module for disk configuration Pim Kunis 2023-12-16 23:47:18 +0100
8a7c1ba6a9 show configuration diffs Pim Kunis 2023-12-16 16:02:41 +0100
1e9a84f658 use kubenix to generate bootstrap k8s manifests enable experimental features Pim Kunis 2023-12-16 15:45:17 +0100
06aa435612 Merge branch 'kubernetes' Pim Kunis 2023-12-16 14:07:45 +0100
38fce7d2b4 parameterize data disk mount point Pim Kunis 2023-12-15 15:20:28 +0100
b6a37eabbd parameterize fqdn for k3s SAN Pim Kunis 2023-12-15 15:11:14 +0100
052e3d7b63 create custom module for k3s configuration Pim Kunis 2023-12-15 14:55:48 +0100
0071dbfee5 bootstrap admin clusterrolebinding Pim Kunis 2023-12-15 14:34:33 +0100
1c0e4794a8 change k3s data dir to external disk add additional SAN to k3s certificates update README with k8s certificate instructions open port for kubectl Pim Kunis 2023-12-14 21:42:58 +0100
deb87e4da3 add option to fix MAC address of VM create atlas VM Pim Kunis 2023-11-29 18:59:36 +0100
d5d6b0d7cc Merge pull request 'Terraform & atlas' (#16) from vms into master Pim Kunis 2023-11-29 17:23:24 +0100
7e9637c984 manage atlas Pim Kunis 2023-11-29 17:21:18 +0100
4f41fd746a enable k3s cluster add simple kubenix script Pim Kunis 2023-11-29 10:02:50 +0100
0bf113fa25 WIP: nixos-anywhere for virtual machines Pim Kunis 2023-11-25 21:00:21 +0100
cc809942ef Merge pull request 'psql-terraform-db' (#12) from psql-terraform-db into master Pim Kunis 2023-11-25 14:52:19 +0100
d1d52e0d96 add psql env variables to .envrc Pim Kunis 2023-11-25 14:43:37 +0100
51f84c42ba enable client certificate checking Pim Kunis 2023-11-25 13:41:49 +0100
d523da899c refactor module logic Pim Kunis 2023-11-24 13:52:51 +0100
c01d15a3e7 allow postgresql traffic in nftables Pim Kunis 2023-11-24 10:53:18 +0100
baa18a1929 add terraform user permit terraformstates db access to terraform user Pim Kunis 2023-11-24 10:48:18 +0100
fbf8bb2ad6 working postgresql installation Pim Kunis 2023-11-24 10:31:23 +0100
05e7f70bbc enable uptimed closes #11 Pim Kunis 2023-11-22 19:31:37 +0100
fe79f59b2d fix ssh client config closes #8 Pim Kunis 2023-11-22 19:04:26 +0100
0d316fe7d2 merge normal and hardware configuration Pim Kunis 2023-11-22 18:54:05 +0100
e19e738b04 create custom module system Pim Kunis 2023-11-22 18:28:55 +0100
74bcda2c80 add saner pre-installed programs Pim Kunis 2023-11-22 16:53:34 +0100
d7a565f2ce use btrfs as main OS parition type add 4GB swap partition closes #6 closes #7 Pim Kunis 2023-11-19 17:48:57 +0100
7e70d253f3 remove rust-motd because it is interferring with SSH Pim Kunis 2023-11-19 17:31:12 +0100
fc52d1c5be use rust-motd for greeting message Pim Kunis 2023-11-15 21:25:35 +0100
1beef05467 Merge pull request 'nixos-anywhere' (#4) from nixos-anywhere into master Pim Kunis 2023-11-15 13:47:05 +0100
730ae4c4f2 switch to flake version of nixos-anywhere due to nixos-unstable issue Pim Kunis 2023-11-15 13:37:13 +0100
7fc138bc65 update readme update boostrap script Pim Kunis 2023-11-15 13:24:06 +0100
8e6a40e878 fix formatter error Pim Kunis 2023-11-15 13:10:27 +0100
37f1e07e74 create helpers for creating nixos system and deploy nodes move machine definitions to separate directory Pim Kunis 2023-11-15 13:06:59 +0100
3550a6e8a8 create top-level machine definition that is used by both deploy-rs and nixos rename bootstrap script Pim Kunis 2023-11-15 12:55:57 +0100
b4fbc0b955 improve nixos anywhere script: - deploy age identity - make script machine indepdendent - add sanity check for wiping the system create nix shell for running the script Pim Kunis 2023-11-15 11:41:45 +0100
022a6aabb4 remove ansible deploy ssh host and user keys using agenix deploy ssh certificates using ssh Pim Kunis 2023-11-14 23:53:04 +0100
dd8b23f5a9 initial nixos-anywhere Pim Kunis 2023-11-13 22:44:43 +0100
cf611e6362 remove nixpkgs overlay for deploy-rs Pim Kunis 2023-11-12 14:15:21 +0100
8c7c294aba update flake inputs Pim Kunis 2023-11-12 14:11:52 +0100
1faea2dd28 use deploy-rs closes #2 Pim Kunis 2023-11-12 00:04:37 +0100
840628740b add firewall! Pim Kunis 2023-11-08 21:16:51 +0100
a95ef6b212 propagate system arch to hardware configuration Pim Kunis 2023-11-05 20:14:19 +0100
397d6ab765 initial support for multiple servers Pim Kunis 2023-11-05 20:11:51 +0100
a4a0e587c3 Update README.md Pim Kunis 2023-11-05 19:07:32 +0100
9c59a20b54 update README change directory naming Pim Kunis 2023-11-05 19:03:44 +0100
0ab4ba65c6 init Pim Kunis 2023-11-05 18:43:32 +0100