Commit graph

379 commits

Author SHA1 Message Date
oddlama
43b2bd1982
fix: route the whole wireguard network when we are a client. 2023-05-20 20:58:37 +02:00
oddlama
f95bc0eb30
feat: allow reservation of addresses in wireguard network 2023-05-20 20:47:09 +02:00
oddlama
0221a24225
fix: ajust firewall rule names and wireguard link name to match 2023-05-20 19:35:17 +02:00
oddlama
3862bd6b14
feat: remove the need to specify cidrs in wireguard addresses and
properly derive allowed ips
2023-05-20 18:24:30 +02:00
oddlama
4057ee9051
feat: implement cidr coersion to automatically determine wireguard network size from participants 2023-05-20 15:57:19 +02:00
oddlama
6d8f8ab2e3
feat: add static microvm networking; allow cidrv4 and cidrv6 to be
specified explicitly on wireguard networks to allow for
  simple access by other modules.
2023-05-20 00:55:48 +02:00
oddlama
78cdcd3c69
feat: refactor and integrate wireguard module into microvm module 2023-05-19 21:33:27 +02:00
oddlama
02f27c85f4
chore: enforce disko use for microvm hosts 2023-05-16 17:54:43 +02:00
oddlama
c03d1a1c8f
chore: fix toplevel microvm attrset merging 2023-05-14 01:48:13 +02:00
oddlama
70f7ef3023
feat: add automatic zfs persistent dataset management to microvms 2023-05-14 00:27:29 +02:00
oddlama
2b4449569f
chore: add writable store overlay in microvms 2023-05-12 01:45:00 +02:00
oddlama
a543394fa8
feat: enable ipv6 RA 2023-05-11 18:18:52 +02:00
oddlama
14ef8ef877
feat: modularize link renaming 2023-05-11 01:28:31 +02:00
oddlama
24655ece76
feat: add macvtap networking to microvms 2023-05-10 02:07:09 +02:00
oddlama
8cb904c44c
chore: update hostapd module from PR 2023-05-09 01:32:20 +02:00
oddlama
d842d25eb9
feat: add microvm module to simplify setup 2023-05-08 17:13:40 +02:00
oddlama
deab5b335e
feat: add zoned nftables firewall 2023-04-21 01:27:43 +02:00
oddlama
703056a530
chore: add lib-net; use upstreamed esphome module :) 2023-04-19 18:12:27 +02:00
oddlama
12d840c7bf
feat(core): add nixos-nftables-firewall; and move some things from core/default.nix to more approriate locations 2023-04-16 00:35:04 +02:00
oddlama
1630e37afd
feat(wireguard): qr generation finished 2023-04-15 16:29:37 +02:00
oddlama
d5f2880457
feat(wireguard): generate psks only if needed; add most of the qr code generator 2023-04-15 01:52:30 +02:00
oddlama
925d3856e0
feat(wireguard): associate external peers to the specific defining node 2023-04-14 16:24:41 +02:00
oddlama
d522a46f1d
refactor(wireguard): extract cross-host aggregation functions into extraLib 2023-04-14 14:32:17 +02:00
oddlama
6cffccd75c
feat: add wireguard key and psk generator app 2023-04-12 01:07:55 +02:00
oddlama
b250a6b1b3
feat(apps): add wireguard peer selection for use with qr code generation later 2023-04-11 17:50:19 +02:00
oddlama
62e7d4ec91
chore: remove unused imports 2023-04-11 17:16:53 +02:00
oddlama
786fb75920
feat(wireguard): finish module and assertions 2023-04-11 17:15:36 +02:00
oddlama
ea48c316cc
feat: add preliminary wireguard module 2023-04-11 01:27:58 +02:00
oddlama
c01ee0f409
chore: update modules from PRs 2023-04-06 00:57:00 +02:00
oddlama
5d095392cf
feat: per-bss settings in hostapd module, prepare vaultwarden for later 2023-04-02 17:33:04 +02:00
oddlama
f9bf4f8e32
fix(zackbiene): esphome platformio directory was resolved wrongly 2023-03-23 03:31:36 +01:00
oddlama
5d8c1c902d
feat: modulize esphome 2023-03-22 20:18:25 +01:00
oddlama
8545dff4e7
chore: tested hostapd wpa2 and wpa3-transition modes 2023-03-21 01:29:18 +01:00
oddlama
32f1474d3f
fix: remve useless hostapd examples, minor fixes 2023-03-21 00:31:37 +01:00
oddlama
8088cd67fa
chore: use rewritten hostapd module 2023-03-21 00:13:37 +01:00
oddlama
5fe125f892
chore(hostapd): added password file concatenation and better sae password definition
v1.0 of new hostapd module done
2023-03-20 17:28:26 +01:00
oddlama
1383eb20df
chore: wip: add assertions and most of runtime file generation 2023-03-20 02:27:10 +01:00
oddlama
561c5c82e1
chore: wip: reorganize and finish specifying hostapd options 2023-03-20 00:29:43 +01:00
oddlama
9c5aaef805
feat: new hostapd module v0.5 done (stitching, categorization missing) 2023-03-19 02:01:50 +01:00
oddlama
3dd210d5cf
chore: wip: add better options to hostapd module 2023-03-19 01:10:37 +01:00
oddlama
076db4963f
chore: wip: begin building better hostapd module 2023-03-18 16:46:06 +01:00
oddlama
9758a6e1e9
refactor: rename ./modules to ./hosts/common 2023-03-18 15:54:07 +01:00
oddlama
711c97b393
fix(zackbiene): fix esphome hardening to allow socket creation, fix hostapd config syntax 2023-03-16 03:36:53 +01:00
oddlama
fc8b59178b
feat(zackbiene): add hostapd config 2023-03-16 01:25:20 +01:00
oddlama
f2f8ca71bb
chore: put real MAC addresses in repo secrets 2023-03-15 17:43:33 +01:00
oddlama
b03c913349
feat: implement repository-wide secrets 2023-03-14 23:55:59 +01:00
oddlama
811e770cb0
feat: split initrd-ssh into own selectable file 2023-03-13 20:12:53 +01:00
oddlama
8c343b8f0f
feat: add odroid-n2 config 2023-03-11 23:03:52 +01:00
oddlama
056ce8a553
chore: use temporary secrets for zackbiene 2023-02-20 21:04:15 +01:00
oddlama
df628838bf
feat: add host zackbiene 2023-02-20 20:38:49 +01:00