536 commits

Author	SHA1	Message	Date
oddlama	02a8544825	chore: remove recursive-nix	2023-06-25 22:57:43 +02:00
oddlama	1aa2a8d8b7	chore: unfortunately basic-auth conflicts with influxdb	2023-06-25 14:59:41 +02:00
oddlama	10a52642ad	chore: test basic auth with influx, but seems to conflict with internal auth	2023-06-25 14:37:25 +02:00
oddlama	6e15d49cbc	fix: missing https scheme in telegraf output influxdb	2023-06-25 02:56:16 +02:00
oddlama	f606e6e554	feat: enable telegraf on all server nodes; add 10 minute autorestart	2023-06-25 02:34:05 +02:00
oddlama	b8f647fb4a	feat: add telegraf module	2023-06-25 00:44:04 +02:00
oddlama	df2e046295	chore: disable auto login on oauth2-proxy and grafana (better for sign-out)	2023-06-23 23:27:34 +02:00
oddlama	ccd62a730a	feat: add influxdb microvm	2023-06-23 18:07:54 +02:00
oddlama	eb9ee0bf0d	feat: patch oauth2-proxy to support scopes as groups	2023-06-23 15:20:58 +02:00
oddlama	1a0378ee5c	feat: use nginx json logs; oauth2-proxy authentication working, groups not yet	2023-06-23 00:40:15 +02:00
oddlama	71dbda6262	feat: promote oauth proxy config to a nginx virtualHosts option	2023-06-22 02:55:22 +02:00
oddlama	dea87afdbc	fix: invalid space in htpasswd file	2023-06-22 00:57:30 +02:00
oddlama	f0d2475f74	feat: convert all microvms to use nginx	2023-06-22 00:51:45 +02:00
oddlama	edb1d8791d	chore: include our oauth module	2023-06-21 23:58:03 +02:00
oddlama	5f02889bd0	feat: remove caddy, enable nginx with oauth2_proxy	2023-06-21 23:57:33 +02:00
oddlama	041cf9cc33	chore: remove obsolete dhparams on zackbiene	2023-06-21 23:56:57 +02:00
oddlama	b545967e7a	feat: add adguardhome microvm	2023-06-21 01:37:25 +02:00
oddlama	6b81ecd961	feat: prepare sentinel for webapp oauth2 authentication	2023-06-21 01:36:44 +02:00
oddlama	06d5d26dde	fix: apparently ':' is not a great character for basic auth	2023-06-18 16:03:41 +02:00
oddlama	d6af975817	feat: enable promtail on all vms	2023-06-18 14:31:23 +02:00
oddlama	4d5813a2ad	fix: missing protocol spec in vaultwarden domain	2023-06-18 13:15:23 +02:00
oddlama	1b42e0cd72	fix: refactoring mistakes; and add generator for initrd_host_ed25519_key	2023-06-18 12:55:18 +02:00
oddlama	abdf363fba	feat: add vaultwarden microvm	2023-06-18 01:12:08 +02:00
oddlama	53850a4ff2	chore: remove old todo	2023-06-17 23:47:30 +02:00
oddlama	b682db7173	chore: add caddy common defaults	2023-06-17 23:46:40 +02:00
oddlama	9ed52a253c	feat: enforce deterministic user and group ids	2023-06-17 23:44:54 +02:00
oddlama	998d6d5348	refactor: move all proxy related configuration to the nodes that define them	2023-06-13 02:58:14 +02:00
oddlama	ead3c1696f	chore: update flake dependencies, regenerate basic auth hashes	2023-06-13 01:02:02 +02:00
oddlama	5bd65732f5	fix: distributed-config now works across microvms and colmena nodes	2023-06-13 00:17:12 +02:00
oddlama	69bd2a71ce	feat: generate secrets	2023-06-12 01:03:44 +02:00
oddlama	f33fa54b65	refactor: move relevant secrets to microvms	2023-06-12 00:32:27 +02:00
oddlama	dfe1abdfde	refactor: ward microvms are now own folders	2023-06-12 00:23:07 +02:00
oddlama	3f19475eda	wip: prepare moving microvms definitions to own folders	2023-06-12 00:21:25 +02:00
oddlama	e4199be809	chore: define registry for proxied domains	2023-06-12 00:20:45 +02:00
oddlama	46ce6ed353	feat: make promtail module reusable	2023-06-12 00:20:32 +02:00
oddlama	91306427ba	refactor: move vm definitions to own files	2023-06-11 14:42:20 +02:00
oddlama	4abefb0811	fix: wireguard generator pipe issue	2023-06-10 02:00:08 +02:00
oddlama	e61c82ebfc	feat: generate caddy basic auth passwords using agenix-rekey	2023-06-10 00:52:17 +02:00
oddlama	dec790c589	chore: update to new agenix-rekey format	2023-06-07 19:48:15 +02:00
oddlama	972b0456da	chore: use flushBeforeStage2=true to avoid networking issues; fix loki listen address	2023-06-06 01:04:39 +02:00
oddlama	8c9fb505f8	feat: add basic auth for loki	2023-06-05 20:55:18 +02:00
oddlama	1e6927a434	chore: remove old nginx and oauth2-proxy config for sentinel	2023-06-05 01:54:40 +02:00
oddlama	9e4f8dcf0d	feat: convert sentinel to caddy	2023-06-05 01:53:38 +02:00
oddlama	6f84594c87	feat: add customizable caddy package (with plugin support)	2023-06-05 01:14:46 +02:00
oddlama	c5a863ce51	wip: prepare testing caddy over nginx with oauth2-proxy	2023-06-04 21:42:28 +02:00
oddlama	7f2f93b640	feat: loki working	2023-06-04 02:27:40 +02:00
oddlama	0cc126fb5f	feat: wip: test loki	2023-06-03 17:52:48 +02:00
oddlama	b0e9978ead	chore: add separate /state directory for reboot-persistent non-backuped state	2023-06-03 17:50:54 +02:00
oddlama	ba1932d2ef	fix: let kea wait on the macvtap self interface	2023-06-03 17:47:50 +02:00
oddlama	bd803c5976	feat(microvm): remove VM ids in favor of automatically assigned MACs	2023-06-03 17:46:12 +02:00