99 commits

Author	SHA1	Message	Date
oddlama	664cb45a08	refactor: make luks names predictable	2024-01-05 13:29:46 +01:00
oddlama	1a96a4b8df	feat(sire): init host: main media storage server	2024-01-04 19:06:23 +01:00
oddlama	06a68e0b62	chore: move nginx module to extra-modules	2023-12-25 21:51:00 +01:00
oddlama	2120aefef5	fix: rename influx org to machines; fix typo that prevented auth tokens from being created (organization>s<)	2023-12-23 15:16:22 +01:00
oddlama	d5304bbe2b	feat: make virtiofsd tags short and friendly to not upset the software ... with oh-so-bad long strings with underscores	2023-12-23 00:07:03 +01:00
oddlama	dfed8f8219	feat: move modules/optional/boot-* -> nixos-extra-modules	2023-12-22 20:35:19 +01:00
oddlama	6f1c20a718	feat: update credentialsFile to credentialFiles in acme	2023-12-17 20:56:16 +01:00
oddlama	1f9a28c3db	feat(nftables): update to new nftables firewall branch	2023-10-15 14:10:06 +02:00
oddlama	562d1dffb3	chore: run deadnix	2023-09-04 22:01:47 +02:00
oddlama	0b8de70330	chore: generate and use new secrets	2023-08-27 01:19:03 +02:00
oddlama	7c48e51320	feat: use kanidm secret provisioning	2023-08-27 01:17:11 +02:00
oddlama	5eacb319db	chore: remove unused secrets	2023-08-17 00:03:57 +02:00
oddlama	377da23c0d	feat: automatically provision tokens for telegraf	2023-08-16 01:16:19 +02:00
oddlama	788e7e3fa7	chore: move generated secrets to separate directory	2023-07-31 12:42:46 +02:00
oddlama	eeac57d30d	feat(zackbiene): reenable hass with ACME double proxy	2023-07-27 19:06:03 +02:00
oddlama	e1e7516e1a	refactor: add lib extensions to nixpkgs.lib as overlays	2023-07-02 00:08:17 +02:00
oddlama	80e7c1bdbf	refactor: finish decoupling the library functions from config	2023-07-01 01:11:58 +02:00
oddlama	68bb9731d3	wip: remove very specific special args and unify library functions	2023-06-30 01:55:17 +02:00
oddlama	84ac34cb6c	refactor: major refactor into proper reusable modules. No logical changes.	2023-06-29 00:27:54 +02:00
oddlama	9a810bd125	feat: convert nom to disko	2023-06-25 22:58:11 +02:00
oddlama	6e15d49cbc	fix: missing https scheme in telegraf output influxdb	2023-06-25 02:56:16 +02:00
oddlama	f606e6e554	feat: enable telegraf on all server nodes; add 10 minute autorestart	2023-06-25 02:34:05 +02:00
oddlama	df2e046295	chore: disable auto login on oauth2-proxy and grafana (better for sign-out)	2023-06-23 23:27:34 +02:00
oddlama	eb9ee0bf0d	feat: patch oauth2-proxy to support scopes as groups	2023-06-23 15:20:58 +02:00
oddlama	1a0378ee5c	feat: use nginx json logs; oauth2-proxy authentication working, groups not yet	2023-06-23 00:40:15 +02:00
oddlama	71dbda6262	feat: promote oauth proxy config to a nginx virtualHosts option	2023-06-22 02:55:22 +02:00
oddlama	5f02889bd0	feat: remove caddy, enable nginx with oauth2_proxy	2023-06-21 23:57:33 +02:00
oddlama	6b81ecd961	feat: prepare sentinel for webapp oauth2 authentication	2023-06-21 01:36:44 +02:00
oddlama	53850a4ff2	chore: remove old todo	2023-06-17 23:47:30 +02:00
oddlama	998d6d5348	refactor: move all proxy related configuration to the nodes that define them	2023-06-13 02:58:14 +02:00
oddlama	ead3c1696f	chore: update flake dependencies, regenerate basic auth hashes	2023-06-13 01:02:02 +02:00
oddlama	69bd2a71ce	feat: generate secrets	2023-06-12 01:03:44 +02:00
oddlama	e4199be809	chore: define registry for proxied domains	2023-06-12 00:20:45 +02:00
oddlama	91306427ba	refactor: move vm definitions to own files	2023-06-11 14:42:20 +02:00
oddlama	e61c82ebfc	feat: generate caddy basic auth passwords using agenix-rekey	2023-06-10 00:52:17 +02:00
oddlama	dec790c589	chore: update to new agenix-rekey format	2023-06-07 19:48:15 +02:00
oddlama	8c9fb505f8	feat: add basic auth for loki	2023-06-05 20:55:18 +02:00
oddlama	1e6927a434	chore: remove old nginx and oauth2-proxy config for sentinel	2023-06-05 01:54:40 +02:00
oddlama	9e4f8dcf0d	feat: convert sentinel to caddy	2023-06-05 01:53:38 +02:00
oddlama	6f84594c87	feat: add customizable caddy package (with plugin support)	2023-06-05 01:14:46 +02:00
oddlama	c5a863ce51	wip: prepare testing caddy over nginx with oauth2-proxy	2023-06-04 21:42:28 +02:00
oddlama	b0e9978ead	chore: add separate /state directory for reboot-persistent non-backuped state	2023-06-03 17:50:54 +02:00
oddlama	135528e082	feat: add grafana test setup with oauth2	2023-06-02 01:28:35 +02:00
oddlama	df2657bb1c	feat(ward): open kanidm port only for sentinel	2023-06-01 01:33:13 +02:00
oddlama	ef03fd0594	feat: activate acme on sentinel	2023-05-31 18:06:53 +02:00
oddlama	6672846d59	feat: modularize hetzner-cloud and odroid-n2plus hardware	2023-05-31 16:34:13 +02:00
oddlama	61d582f033	feat: add ability to copy installer scripts to existing live systems	2023-05-30 02:46:29 +02:00
oddlama	ca7bbeec72	chore: add secrets for sentinel	2023-05-29 21:51:23 +02:00
oddlama	97cb4e0ac5	feat: add new machine "sentinel", a Hetzner Cloud server	2023-05-29 16:19:49 +02:00