78 commits

Author	SHA1	Message	Date
oddlama	61d582f033	feat: add ability to copy installer scripts to existing live systems	2023-05-30 02:46:29 +02:00
oddlama	41df399bb6	feat: automatically generate allowedTCPPorts for mdns enabled ... interfaces; simplify nftables rules by adding a general untrusted zone	2023-05-27 01:59:28 +02:00
oddlama	0e3d881887	feat: experiment with kanidm and acme dns-01. add common conditional locations to impermanence	2023-05-25 01:57:16 +02:00
oddlama	f65b217a92	feat: change passwords and hide new hashes	2023-05-22 23:53:45 +02:00
oddlama	aaa1d88d46	docs: update README	2023-05-21 23:58:25 +02:00
oddlama	3862bd6b14	feat: remove the need to specify cidrs in wireguard addresses and ... properly derive allowed ips	2023-05-20 18:24:30 +02:00
oddlama	24655ece76	feat: add macvtap networking to microvms	2023-05-10 02:07:09 +02:00
oddlama	4cee692eff	feat: enable impermanence	2023-05-01 11:49:37 +02:00
oddlama	08290e5052	feat: move common disko functionality into lib	2023-04-30 13:41:09 +02:00
oddlama	f62b01f206	chore: switch to upstream disko again, PR is merged	2023-04-29 23:03:43 +02:00
oddlama	a90a8ee678	feat: finish system bootstrapping with iso	2023-04-29 22:34:42 +02:00
oddlama	c3141bf563	fix: generate initrd hostkey if necessary when system is bootstrapped; fix disko partition types	2023-04-29 00:53:06 +02:00
oddlama	5c98df767b	chore: change iso image name, add ssh key	2023-04-28 00:51:38 +02:00
oddlama	3e810b1711	feat: add generation of installer image for each host	2023-04-26 23:58:08 +02:00
oddlama	d522a46f1d	refactor(wireguard): extract cross-host aggregation functions into extraLib	2023-04-14 14:32:17 +02:00
oddlama	ea48c316cc	feat: add preliminary wireguard module	2023-04-11 01:27:58 +02:00
oddlama	83a543b266	refactor: split apps into own files	2023-04-10 12:28:14 +02:00
oddlama	aa2a660c61	chore: remove overlays for now	2023-03-29 16:16:40 +02:00
oddlama	ba0d5f2f5d	chore(common): rename to sound.nix	2023-03-28 14:15:13 +02:00
oddlama	01940d0e19	docs: function of all files documented	2023-03-27 17:21:05 +02:00
oddlama	1afff422de	docs: begin structure documentation	2023-03-27 16:59:23 +02:00
oddlama	0bc49cc3f9	chore: only warn when hostkey is missing	2023-03-27 16:59:16 +02:00
oddlama	cbb6f906ec	feat(zackbiene): deploy self signed TLS certs	2023-03-24 17:38:28 +01:00
oddlama	3111408f7d	feat: allow .nix.age files to contain functions or bare attrs	2023-03-15 02:29:14 +01:00
oddlama	32e346be56	docs: show how to setup nix-plugins	2023-03-15 01:54:02 +01:00
oddlama	24a8795226	wip: feat: draft module to support transparent per-host rekeying	2023-01-26 22:37:32 +01:00
oddlama	04fc94267a	refactor: pivot to lovesegfault's config structure	2022-12-08 23:41:07 +01:00
oddlama	559a7be9fd	feat: add readme	2022-11-23 14:00:32 +01:00