1128 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
oddlama	f95bc0eb30	feat: allow reservation of addresses in wireguard network	2023-05-20 20:47:09 +02:00
oddlama	0221a24225	fix: ajust firewall rule names and wireguard link name to match	2023-05-20 19:35:17 +02:00
oddlama	3862bd6b14	feat: remove the need to specify cidrs in wireguard addresses and ... properly derive allowed ips	2023-05-20 18:24:30 +02:00
oddlama	4057ee9051	feat: implement cidr coersion to automatically determine wireguard network size from participants	2023-05-20 15:57:19 +02:00
oddlama	6d8f8ab2e3	feat: add static microvm networking; allow cidrv4 and cidrv6 to be ... specified explicitly on wireguard networks to allow for simple access by other modules.	2023-05-20 00:55:48 +02:00
oddlama	78cdcd3c69	feat: refactor and integrate wireguard module into microvm module	2023-05-19 21:33:27 +02:00
oddlama	e5f3ffd288	fix: reference extra-builtins.nix with access to relative files	2023-05-18 11:48:09 +02:00
oddlama	02f27c85f4	chore: enforce disko use for microvm hosts	2023-05-16 17:54:43 +02:00
oddlama	c03d1a1c8f	chore: fix toplevel microvm attrset merging	2023-05-14 01:48:13 +02:00
oddlama	70f7ef3023	feat: add automatic zfs persistent dataset management to microvms	2023-05-14 00:27:29 +02:00
oddlama	2b4449569f	chore: add writable store overlay in microvms	2023-05-12 01:45:00 +02:00
oddlama	a543394fa8	feat: enable ipv6 RA	2023-05-11 18:18:52 +02:00
oddlama	cdd35390fb	chore: switch to zfs on luks	2023-05-11 12:54:38 +02:00
oddlama	14ef8ef877	feat: modularize link renaming	2023-05-11 01:28:31 +02:00
oddlama	e8f50ab906	fix: prevent path -> string conversion in hostPubkey definition, which ... caused repeated unnecessary rekeying	2023-05-10 18:24:24 +02:00
oddlama	24655ece76	feat: add macvtap networking to microvms	2023-05-10 02:07:09 +02:00
oddlama	8cb904c44c	chore: update hostapd module from PR	2023-05-09 01:32:20 +02:00
oddlama	e2ba02234a	feat: restructure user common files, allow selecting "minimal" set of options for vms	2023-05-08 18:03:29 +02:00
oddlama	d842d25eb9	feat: add microvm module to simplify setup	2023-05-08 17:13:40 +02:00
oddlama	72a34cac01	fix: fix parenthesis precedence	2023-05-08 15:03:41 +02:00
oddlama	7ecbb69ff8	chore: remove last uses of with lib	2023-05-08 14:49:28 +02:00
oddlama	1b9d9fc58a	feat: add declarative microvms	2023-05-08 14:48:59 +02:00
oddlama	1a7472207a	chore: update ward hostkey after resetup	2023-05-01 15:32:14 +02:00
oddlama	5d8a60b4d8	fix: properly inherit stateVersion on home-manager configs	2023-05-01 15:27:56 +02:00
oddlama	de19b23d3d	refactor: split hardware related and system related common configuration	2023-05-01 15:27:28 +02:00
oddlama	f55c83c1b8	fix(impermanence): give agenix early access to ssh keys	2023-05-01 15:00:02 +02:00
oddlama	e2e2c2a757	chore: auto optimize biweekly; delete generations older than 90d; use single-definition for stateVersion	2023-05-01 14:42:36 +02:00
oddlama	4cee692eff	feat: enable impermanence	2023-05-01 11:49:37 +02:00
oddlama	30cfdaf860	refactor: remove meta.nix in favor of direct declaration in flake.nix	2023-04-30 14:06:25 +02:00
oddlama	08290e5052	feat: move common disko functionality into lib	2023-04-30 13:41:09 +02:00
oddlama	f62b01f206	chore: switch to upstream disko again, PR is merged	2023-04-29 23:03:43 +02:00
oddlama	a90a8ee678	feat: finish system bootstrapping with iso	2023-04-29 22:34:42 +02:00
oddlama	c3141bf563	fix: generate initrd hostkey if necessary when system is bootstrapped; fix disko partition types	2023-04-29 00:53:06 +02:00
oddlama	5c98df767b	chore: change iso image name, add ssh key	2023-04-28 00:51:38 +02:00
oddlama	3e810b1711	feat: add generation of installer image for each host	2023-04-26 23:58:08 +02:00
oddlama	05ce0e6f5c	feat: enable initrd ssh unlock for all machines	2023-04-24 18:41:05 +02:00
oddlama	c26b5d3c89	feat: use stage1 systemd (and enable initrd sshd on ward)	2023-04-24 18:38:03 +02:00
oddlama	20adc139f8	chore: enable ip forwarding on ward	2023-04-21 17:32:46 +02:00
oddlama	deab5b335e	feat: add zoned nftables firewall	2023-04-21 01:27:43 +02:00
oddlama	703056a530	chore: add lib-net; use upstreamed esphome module :)	2023-04-19 18:12:27 +02:00
oddlama	af9ffb0b8f	chore: hide hostid	2023-04-19 14:55:42 +02:00
oddlama	4898c48c25	fix(home-assistant): remove unnecessary python3Packages	2023-04-17 17:06:51 +02:00
oddlama	3730ae7cf7	chore: automatically get (impure) current system for rekeying.	2023-04-17 17:04:47 +02:00
oddlama	12d840c7bf	feat(core): add nixos-nftables-firewall; and move some things from core/default.nix to more approriate locations	2023-04-16 00:35:04 +02:00
oddlama	2e45d3f423	feat(wireguard): support printing multiple configs at once	2023-04-15 16:55:50 +02:00
oddlama	1630e37afd	feat(wireguard): qr generation finished	2023-04-15 16:29:37 +02:00
oddlama	d5f2880457	feat(wireguard): generate psks only if needed; add most of the qr code generator	2023-04-15 01:52:30 +02:00
oddlama	925d3856e0	feat(wireguard): associate external peers to the specific defining node	2023-04-14 16:24:41 +02:00
oddlama	d522a46f1d	refactor(wireguard): extract cross-host aggregation functions into extraLib	2023-04-14 14:32:17 +02:00
oddlama	6cffccd75c	feat: add wireguard key and psk generator app	2023-04-12 01:07:55 +02:00