310 commits

Author	SHA1	Message	Date
oddlama	beb50045b4	fix(topology): work around network propagator not knowing about mkMerge	2024-04-01 15:49:04 +02:00
oddlama	30579a433e	feat(topology): extract more service info and add helper functions to define stuff	2024-04-01 02:26:52 +02:00
oddlama	dc4d82c828	feat(topology): add automatic lazy network propagation	2024-03-31 17:19:26 +02:00
oddlama	f24fd89ae5	feat(topology): add interface port labels	2024-03-29 14:36:49 +01:00
oddlama	b822b4e812	feat(topology): add services overview card	2024-03-28 01:39:31 +01:00
oddlama	07191bac9b	feat(topology): add elk json generation	2024-03-27 15:36:32 +01:00
oddlama	67063adf24	fix: typo	2024-03-14 21:46:08 +01:00
oddlama	a4844807e6	feat: move wireguard module to nixos-extra-modules	2024-03-14 20:55:08 +01:00
oddlama	76ec1d9c51	fix: allow webauthn iframe on vaultwarden	2024-03-14 01:05:08 +01:00
oddlama	1631c116fd	feat: change forgejo user to git and allow git to login	2024-03-13 02:08:40 +01:00
oddlama	6c9042b4d2	feat: enable OIDC in paperless	2024-03-12 23:01:43 +01:00
oddlama	605aee0a67	feat: update immich; decrease restart timer between failed attempts for all services to 60 seconds	2024-03-12 21:37:04 +01:00
oddlama	dfe0345888	feat: move some services to other domain	2024-03-12 19:40:09 +01:00
oddlama	fcc159ed12	chore: visual cleanup	2024-03-12 17:44:43 +01:00
oddlama	f4b397ece8	fix: disable forgejo auto registration to allow reviewing username and mail	2024-03-12 17:17:57 +01:00
oddlama	fba87840c2	feat: enable oauth in forgejo	2024-03-12 17:09:55 +01:00
oddlama	0ec4a8ebe8	chore: update kanidm module	2024-03-12 16:42:36 +01:00
oddlama	1b0934b565	feat: update kanidm and provisioning	2024-03-11 16:54:02 +01:00
oddlama	aab790065a	fix: add device overrides for new disko partlabel stuff	2024-03-02 16:06:15 +01:00
oddlama	5aad6c3a84	chore: miscellaneous necessary refactors post-update	2024-03-02 14:06:34 +01:00
oddlama	4a34c84995	fix: enable port forwarding on sentinel	2024-01-25 23:43:44 +01:00
oddlama	7f8c5689e0	feat(forgejo): masquerade and dnat sentinel:9922 to forgejo vm	2024-01-23 17:47:28 +01:00
oddlama	8b67068237	fix: enable oauth for immich; enable network access for immich containers; remove nixvim-wayland	2024-01-23 02:48:29 +01:00
oddlama	364073c197	feat: add immich via oci containers	2024-01-20 23:16:43 +01:00
oddlama	d77fcaa826	fix: make paperless and vaultwarden temporary backup dirs persistent to avoid running out of tmpfs space on backups	2024-01-20 20:14:49 +01:00
oddlama	38a89b05a3	fix: restic backups should run as root	2024-01-20 03:23:37 +01:00
oddlama	78ecdd2780	feat: add paperless and radicale backups to hetzner	2024-01-20 03:02:26 +01:00
oddlama	f9e1247b8a	feat: use polling for paperless because virtiofs doesn't send inotify events	2024-01-19 22:03:52 +01:00
oddlama	b162b20241	feat: add vaultwarden restic backups	2024-01-15 03:28:53 +01:00
oddlama	1275d813c8	feat: remove now-obsolete websocket in vaultwarden	2024-01-12 16:09:42 +01:00
oddlama	4241f53f66	chore: various minor updates	2024-01-12 15:54:55 +01:00
oddlama	8876f3076e	feat: add filters and rewrites to adguardhome	2024-01-11 20:18:24 +01:00
oddlama	a44f73d3b0	refactor: move guest system and common lib parts to extra-modules	2024-01-11 03:02:42 +01:00
oddlama	fbab6415ca	chore: don't send ipv6 RA for now	2024-01-06 17:01:51 +01:00
oddlama	21375353a8	chore: retrieve host keys for sire's vms	2024-01-06 03:00:45 +01:00
oddlama	1467560525	chore: change sire ip to .2 and adguardhome to .3	2024-01-06 01:34:55 +01:00
oddlama	4dec7027fa	chore: change influxdb telegraf endpoint to sire	2024-01-06 01:32:09 +01:00
oddlama	bc509ab602	feat(radicale): add users	2024-01-05 22:09:01 +01:00
oddlama	130dc59c37	feat: reserve internal ip for adguardhome	2024-01-05 17:36:27 +01:00
oddlama	4a4420f069	chore: rotate host keys for ward microvms	2024-01-05 17:35:09 +01:00
oddlama	5b0a073d5b	fix: mixed up kernel modules of ward and sire	2024-01-05 17:34:43 +01:00
oddlama	664cb45a08	refactor: make luks names predictable	2024-01-05 13:29:46 +01:00
oddlama	7d1e022b3e	chore: rotate secrets	2024-01-04 19:16:21 +01:00
oddlama	1a96a4b8df	feat(sire): init host: main media storage server	2024-01-04 19:06:23 +01:00
oddlama	36cb1d31cb	feat: add samba users	2024-01-02 19:38:58 +01:00
oddlama	6003922b4f	feat: add samba vm; use cloud-hypervisor while qemu is acting up (2G ram? DSDT table fucked.)	2023-12-30 00:40:03 +01:00
oddlama	3036c53d87	feat: make modules/distributed-config.nix extensible; don't run telegraf on containers because of missing memlock	2023-12-25 17:14:32 +01:00
oddlama	2120aefef5	fix: rename influx org to machines; fix typo that prevented auth tokens from being created (organization>s<)	2023-12-23 15:16:22 +01:00
oddlama	94b0d60ab5	fix: change adguardhome inteface name	2023-12-23 02:53:02 +01:00
oddlama	dfed8f8219	feat: move modules/optional/boot-* -> nixos-extra-modules	2023-12-22 20:35:19 +01:00