310 commits

Author	SHA1	Message	Date
oddlama	80e7c1bdbf	refactor: finish decoupling the library functions from config	2023-07-01 01:11:58 +02:00
oddlama	68bb9731d3	wip: remove very specific special args and unify library functions	2023-06-30 01:55:17 +02:00
oddlama	84ac34cb6c	refactor: major refactor into proper reusable modules. No logical changes.	2023-06-29 00:27:54 +02:00
oddlama	9a810bd125	feat: convert nom to disko	2023-06-25 22:58:11 +02:00
oddlama	1aa2a8d8b7	chore: unfortunately basic-auth conflicts with influxdb	2023-06-25 14:59:41 +02:00
oddlama	10a52642ad	chore: test basic auth with influx, but seems to conflict with internal auth	2023-06-25 14:37:25 +02:00
oddlama	6e15d49cbc	fix: missing https scheme in telegraf output influxdb	2023-06-25 02:56:16 +02:00
oddlama	f606e6e554	feat: enable telegraf on all server nodes; add 10 minute autorestart	2023-06-25 02:34:05 +02:00
oddlama	b8f647fb4a	feat: add telegraf module	2023-06-25 00:44:04 +02:00
oddlama	df2e046295	chore: disable auto login on oauth2-proxy and grafana (better for sign-out)	2023-06-23 23:27:34 +02:00
oddlama	ccd62a730a	feat: add influxdb microvm	2023-06-23 18:07:54 +02:00
oddlama	eb9ee0bf0d	feat: patch oauth2-proxy to support scopes as groups	2023-06-23 15:20:58 +02:00
oddlama	71dbda6262	feat: promote oauth proxy config to a nginx virtualHosts option	2023-06-22 02:55:22 +02:00
oddlama	dea87afdbc	fix: invalid space in htpasswd file	2023-06-22 00:57:30 +02:00
oddlama	f0d2475f74	feat: convert all microvms to use nginx	2023-06-22 00:51:45 +02:00
oddlama	b545967e7a	feat: add adguardhome microvm	2023-06-21 01:37:25 +02:00
oddlama	6b81ecd961	feat: prepare sentinel for webapp oauth2 authentication	2023-06-21 01:36:44 +02:00
oddlama	06d5d26dde	fix: apparently ':' is not a great character for basic auth	2023-06-18 16:03:41 +02:00
oddlama	d6af975817	feat: enable promtail on all vms	2023-06-18 14:31:23 +02:00
oddlama	4d5813a2ad	fix: missing protocol spec in vaultwarden domain	2023-06-18 13:15:23 +02:00
oddlama	1b42e0cd72	fix: refactoring mistakes; and add generator for initrd_host_ed25519_key	2023-06-18 12:55:18 +02:00
oddlama	abdf363fba	feat: add vaultwarden microvm	2023-06-18 01:12:08 +02:00
oddlama	b682db7173	chore: add caddy common defaults	2023-06-17 23:46:40 +02:00
oddlama	998d6d5348	refactor: move all proxy related configuration to the nodes that define them	2023-06-13 02:58:14 +02:00
oddlama	5bd65732f5	fix: distributed-config now works across microvms and colmena nodes	2023-06-13 00:17:12 +02:00
oddlama	69bd2a71ce	feat: generate secrets	2023-06-12 01:03:44 +02:00
oddlama	f33fa54b65	refactor: move relevant secrets to microvms	2023-06-12 00:32:27 +02:00
oddlama	dfe1abdfde	refactor: ward microvms are now own folders	2023-06-12 00:23:07 +02:00
oddlama	3f19475eda	wip: prepare moving microvms definitions to own folders	2023-06-12 00:21:25 +02:00
oddlama	46ce6ed353	feat: make promtail module reusable	2023-06-12 00:20:32 +02:00
oddlama	91306427ba	refactor: move vm definitions to own files	2023-06-11 14:42:20 +02:00
oddlama	4abefb0811	fix: wireguard generator pipe issue	2023-06-10 02:00:08 +02:00
oddlama	e61c82ebfc	feat: generate caddy basic auth passwords using agenix-rekey	2023-06-10 00:52:17 +02:00
oddlama	dec790c589	chore: update to new agenix-rekey format	2023-06-07 19:48:15 +02:00
oddlama	972b0456da	chore: use flushBeforeStage2=true to avoid networking issues; fix loki listen address	2023-06-06 01:04:39 +02:00
oddlama	8c9fb505f8	feat: add basic auth for loki	2023-06-05 20:55:18 +02:00
oddlama	9e4f8dcf0d	feat: convert sentinel to caddy	2023-06-05 01:53:38 +02:00
oddlama	6f84594c87	feat: add customizable caddy package (with plugin support)	2023-06-05 01:14:46 +02:00
oddlama	c5a863ce51	wip: prepare testing caddy over nginx with oauth2-proxy	2023-06-04 21:42:28 +02:00
oddlama	7f2f93b640	feat: loki working	2023-06-04 02:27:40 +02:00
oddlama	0cc126fb5f	feat: wip: test loki	2023-06-03 17:52:48 +02:00
oddlama	b0e9978ead	chore: add separate /state directory for reboot-persistent non-backuped state	2023-06-03 17:50:54 +02:00
oddlama	ba1932d2ef	fix: let kea wait on the macvtap self interface	2023-06-03 17:47:50 +02:00
oddlama	135528e082	feat: add grafana test setup with oauth2	2023-06-02 01:28:35 +02:00
oddlama	df2657bb1c	feat(ward): open kanidm port only for sentinel	2023-06-01 01:33:13 +02:00
oddlama	6cedaa53e6	chore: bind kanidm to proxy	2023-05-31 18:07:07 +02:00
oddlama	d18e86f981	chore: use auto-ip for microvms, change ipv6 address scheme	2023-05-29 02:13:35 +02:00
oddlama	c789e2de36	feat(wireguard): add ability to automatically assign addresses	2023-05-29 00:07:56 +02:00
oddlama	4e8103af47	wip: prepare for autogenerated wireguard ips; prepare for sentinel server	2023-05-28 01:05:23 +02:00
oddlama	21e88619b7	fix: need attrset in config.lib, fix typo in nftables rule	2023-05-27 02:28:20 +02:00