310 commits

Author	SHA1	Message	Date
oddlama	41df399bb6	feat: automatically generate allowedTCPPorts for mdns enabled ... interfaces; simplify nftables rules by adding a general untrusted zone	2023-05-27 01:59:28 +02:00
oddlama	e37601b486	feat: switch to DHCP based networking for microvms using mDNS for resolution	2023-05-26 01:21:26 +02:00
oddlama	0e3d881887	feat: experiment with kanidm and acme dns-01. add common conditional locations to impermanence	2023-05-25 01:57:16 +02:00
oddlama	cc2397669d	feat: allow microvms to override configPath	2023-05-23 01:09:37 +02:00
oddlama	ec3b34a368	fix: mount vm datasets under /vms to avoid accidental shadowing on creation	2023-05-21 23:39:53 +02:00
oddlama	bd8a14deb0	feat: ensure vms come online after deployment even with missing wireguard keys	2023-05-21 23:26:51 +02:00
oddlama	f3ed1248af	feat: properly ensure vm zfs dataset exists	2023-05-21 22:57:40 +02:00
oddlama	a0d22b8be1	feat: allow specifying host pubkey as string	2023-05-21 16:01:49 +02:00
oddlama	d7f69c5baa	refactor: properly modularize repo secret management	2023-05-21 14:40:42 +02:00
oddlama	88f1ac54b8	fix: remove faulty agenix directory early and only if necessary ... chore: change default microvm naming scheme to <host>-<name>	2023-05-21 01:29:54 +02:00
oddlama	0221a24225	fix: ajust firewall rule names and wireguard link name to match	2023-05-20 19:35:17 +02:00
oddlama	4057ee9051	feat: implement cidr coersion to automatically determine wireguard network size from participants	2023-05-20 15:57:19 +02:00
oddlama	6d8f8ab2e3	feat: add static microvm networking; allow cidrv4 and cidrv6 to be ... specified explicitly on wireguard networks to allow for simple access by other modules.	2023-05-20 00:55:48 +02:00
oddlama	78cdcd3c69	feat: refactor and integrate wireguard module into microvm module	2023-05-19 21:33:27 +02:00
oddlama	02f27c85f4	chore: enforce disko use for microvm hosts	2023-05-16 17:54:43 +02:00
oddlama	70f7ef3023	feat: add automatic zfs persistent dataset management to microvms	2023-05-14 00:27:29 +02:00
oddlama	a543394fa8	feat: enable ipv6 RA	2023-05-11 18:18:52 +02:00
oddlama	cdd35390fb	chore: switch to zfs on luks	2023-05-11 12:54:38 +02:00
oddlama	14ef8ef877	feat: modularize link renaming	2023-05-11 01:28:31 +02:00
oddlama	24655ece76	feat: add macvtap networking to microvms	2023-05-10 02:07:09 +02:00
oddlama	e2ba02234a	feat: restructure user common files, allow selecting "minimal" set of options for vms	2023-05-08 18:03:29 +02:00
oddlama	d842d25eb9	feat: add microvm module to simplify setup	2023-05-08 17:13:40 +02:00
oddlama	1b9d9fc58a	feat: add declarative microvms	2023-05-08 14:48:59 +02:00
oddlama	1a7472207a	chore: update ward hostkey after resetup	2023-05-01 15:32:14 +02:00
oddlama	de19b23d3d	refactor: split hardware related and system related common configuration	2023-05-01 15:27:28 +02:00
oddlama	4cee692eff	feat: enable impermanence	2023-05-01 11:49:37 +02:00
oddlama	30cfdaf860	refactor: remove meta.nix in favor of direct declaration in flake.nix	2023-04-30 14:06:25 +02:00
oddlama	08290e5052	feat: move common disko functionality into lib	2023-04-30 13:41:09 +02:00
oddlama	a90a8ee678	feat: finish system bootstrapping with iso	2023-04-29 22:34:42 +02:00
oddlama	c3141bf563	fix: generate initrd hostkey if necessary when system is bootstrapped; fix disko partition types	2023-04-29 00:53:06 +02:00
oddlama	3e810b1711	feat: add generation of installer image for each host	2023-04-26 23:58:08 +02:00
oddlama	c26b5d3c89	feat: use stage1 systemd (and enable initrd sshd on ward)	2023-04-24 18:38:03 +02:00
oddlama	20adc139f8	chore: enable ip forwarding on ward	2023-04-21 17:32:46 +02:00
oddlama	deab5b335e	feat: add zoned nftables firewall	2023-04-21 01:27:43 +02:00
oddlama	af9ffb0b8f	chore: hide hostid	2023-04-19 14:55:42 +02:00
oddlama	12d840c7bf	feat(core): add nixos-nftables-firewall; and move some things from core/default.nix to more approriate locations	2023-04-16 00:35:04 +02:00
oddlama	1630e37afd	feat(wireguard): qr generation finished	2023-04-15 16:29:37 +02:00
oddlama	d5f2880457	feat(wireguard): generate psks only if needed; add most of the qr code generator	2023-04-15 01:52:30 +02:00
oddlama	d522a46f1d	refactor(wireguard): extract cross-host aggregation functions into extraLib	2023-04-14 14:32:17 +02:00
oddlama	6cffccd75c	feat: add wireguard key and psk generator app	2023-04-12 01:07:55 +02:00
oddlama	786fb75920	feat(wireguard): finish module and assertions	2023-04-11 17:15:36 +02:00
oddlama	ea48c316cc	feat: add preliminary wireguard module	2023-04-11 01:27:58 +02:00
oddlama	83a543b266	refactor: split apps into own files	2023-04-10 12:28:14 +02:00
oddlama	5d095392cf	feat: per-bss settings in hostapd module, prepare vaultwarden for later	2023-04-02 17:33:04 +02:00
oddlama	66bea99eb6	feat: prepare structure for microvm.nix	2023-03-30 01:29:05 +02:00
oddlama	0bc49cc3f9	chore: only warn when hostkey is missing	2023-03-27 16:59:16 +02:00
oddlama	9758a6e1e9	refactor: rename ./modules to ./hosts/common	2023-03-18 15:54:07 +01:00
oddlama	fc8b59178b	feat(zackbiene): add hostapd config	2023-03-16 01:25:20 +01:00
oddlama	f2f8ca71bb	chore: put real MAC addresses in repo secrets	2023-03-15 17:43:33 +01:00
oddlama	811e770cb0	feat: split initrd-ssh into own selectable file	2023-03-13 20:12:53 +01:00