Commit graph

81 commits

Author SHA1 Message Date
oddlama
a1623fb97c
feat: finish migration to new globals system for wireguard 2025-09-13 23:28:22 +02:00
oddlama
b885d1062b
refactor: adjust wireguard accessors to use globals 2025-09-13 21:14:50 +02:00
oddlama
748d5a4bf3
chore: update flake 2025-08-01 21:06:07 +02:00
oddlama
9422389c9c
feat: finally forward ipv6 traffic
(i know ULA snat is not _the way_, but here we are anyway)
2025-04-27 13:06:42 +02:00
oddlama
3f3573a1e2
feat: switch to avahi for mdns and mdns reflection 2025-04-27 11:08:40 +02:00
oddlama
58f2c82b65
chore: disable mdns on all vlans except services 2025-04-26 15:00:49 +02:00
oddlama
c4891afe7d
feat: add firezone gateway and allow trafic 2025-03-16 22:38:03 +01:00
oddlama
e580cd5885
chore: allow home assistant access from devices VLAN for voice PE 2025-02-18 14:33:55 +01:00
oddlama
342c4787ab
feat: allow IGMP traffic and all ICMP traffic 2025-01-26 18:02:44 +01:00
oddlama
7c61ac80fa
feat: enable cross VLAN mdns 2025-01-23 17:26:35 +01:00
oddlama
ec502b4193
feat: allow scanner to access samba SFTP 2025-01-20 17:00:59 +01:00
oddlama
23e21f4145
feat: allow services from home net 2025-01-20 15:36:51 +01:00
oddlama
0f45dfcc1c
feat: switch to new VLAN setup 2025-01-20 03:46:16 +01:00
oddlama
297d19fa0c
feat: finish vlan setup 2024-12-20 01:05:17 +01:00
oddlama
d0448757bf
wip: prepare switch to vlans 2024-12-19 20:31:26 +01:00
oddlama
1302f23133
chore: update flake, disable unifi by default 2024-12-17 01:35:42 +01:00
oddlama
7ccd7856ee
chore: format everything 2024-11-26 13:34:55 +01:00
oddlama
a4fdeb37ea
chore: enable ipv4 forward explicitly 2024-10-28 12:08:54 +01:00
oddlama
1aeef2283a
feat: update flake and switch to append only backups 2024-08-06 01:32:07 +02:00
oddlama
18b2002c27
feat(monitoring): remove location, add nginx upstream monitoring option 2024-07-15 17:36:04 +02:00
oddlama
e35daee76d
feat: define global monitoring for each service and automatically configure telegraf based on it 2024-07-14 14:11:53 +02:00
oddlama
fe75b5b78c
chore: update persist immich containers, add nix-ld on kroma, disable
STT until jaxlib is fixed
2024-07-02 14:49:46 +02:00
oddlama
84df858188
chore: remove deprecated configuration 2024-06-26 02:32:28 +02:00
oddlama
98f228fca7
chore(sad): why is my prefix delegation not delegating prefixes 2024-06-10 22:49:07 +02:00
oddlama
461f651e26
fix: dont use types.cidr* on host cidr because it zeroes the last part 2024-06-10 17:20:41 +02:00
oddlama
def57cfc61
refactor: move lan ip information to globals 2024-06-10 15:49:34 +02:00
oddlama
045f15239a
feat: adguardhome use DoT; fix loki home proxy; allow arbitrary telegraf secrets 2024-05-25 15:49:41 +02:00
oddlama
4e46105e5e
feat: begin zackbiene rework 2024-05-21 22:55:03 +02:00
oddlama
7bb25e5d7a
fix: missing firewall zone was dropping associated config 2024-05-21 01:10:07 +02:00
oddlama
b01c521830
feat: add proxy-home vpn to accelerate traffic between local nodes 2024-05-20 01:35:01 +02:00
oddlama
9daa744334
feat: add netbird (and coturn) 2024-05-15 22:17:21 +02:00
oddlama
a4844807e6
feat: move wireguard module to nixos-extra-modules 2024-03-14 20:55:08 +01:00
oddlama
78ecdd2780
feat: add paperless and radicale backups to hetzner 2024-01-20 03:02:26 +01:00
oddlama
fbab6415ca
chore: don't send ipv6 RA for now 2024-01-06 17:01:51 +01:00
oddlama
1a96a4b8df
feat(sire): init host: main media storage server 2024-01-04 19:06:23 +01:00
oddlama
b4c7fbd0e8
chore: use macvlan for container guests 2023-12-17 20:56:42 +01:00
oddlama
abb8330d86
feat: wip: add container backend to guests 2023-12-17 02:04:20 +01:00
oddlama
76a8f6e247
feat: wip: begin modularizing microvm definitions to allow for other
guest types like containers
2023-12-16 22:19:54 +01:00
oddlama
c2e05c374f
fix(ward): set correct gateway 2023-10-18 00:57:49 +02:00
oddlama
26d3f17451
chore(zackbiene): update wan ip 2023-10-17 21:50:11 +02:00
oddlama
1f9a28c3db
feat(nftables): update to new nftables firewall branch 2023-10-15 14:10:06 +02:00
oddlama
4dae9408a5
chore: switch to static ip on ward 2023-10-02 20:05:36 +02:00
oddlama
e076aca5a0
chore: also disable per link DNS for ipv6 (dhcp, RA) on servers 2023-07-06 15:09:33 +02:00
oddlama
836cd7c6c2
chore: dont use adguardhome for servers 2023-07-06 14:49:37 +02:00
oddlama
3f6286ef31
feat(adguardhome): bind only external interface 2023-07-06 02:34:07 +02:00
oddlama
e1e7516e1a
refactor: add lib extensions to nixpkgs.lib as overlays 2023-07-02 00:08:17 +02:00
oddlama
80e7c1bdbf
refactor: finish decoupling the library functions from config 2023-07-01 01:11:58 +02:00
oddlama
84ac34cb6c
refactor: major refactor into proper reusable modules. No logical changes. 2023-06-29 00:27:54 +02:00
oddlama
f606e6e554
feat: enable telegraf on all server nodes; add 10 minute autorestart 2023-06-25 02:34:05 +02:00
oddlama
ba1932d2ef
fix: let kea wait on the macvtap self interface 2023-06-03 17:47:50 +02:00