1129 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
oddlama	1aa2a8d8b7	chore: unfortunately basic-auth conflicts with influxdb	2023-06-25 14:59:41 +02:00
oddlama	10a52642ad	chore: test basic auth with influx, but seems to conflict with internal auth	2023-06-25 14:37:25 +02:00
oddlama	6e15d49cbc	fix: missing https scheme in telegraf output influxdb	2023-06-25 02:56:16 +02:00
oddlama	f606e6e554	feat: enable telegraf on all server nodes; add 10 minute autorestart	2023-06-25 02:34:05 +02:00
oddlama	b8f647fb4a	feat: add telegraf module	2023-06-25 00:44:04 +02:00
oddlama	df2e046295	chore: disable auto login on oauth2-proxy and grafana (better for sign-out)	2023-06-23 23:27:34 +02:00
oddlama	ccd62a730a	feat: add influxdb microvm	2023-06-23 18:07:54 +02:00
oddlama	eb9ee0bf0d	feat: patch oauth2-proxy to support scopes as groups	2023-06-23 15:20:58 +02:00
oddlama	1a0378ee5c	feat: use nginx json logs; oauth2-proxy authentication working, groups not yet	2023-06-23 00:40:15 +02:00
oddlama	71dbda6262	feat: promote oauth proxy config to a nginx virtualHosts option	2023-06-22 02:55:22 +02:00
oddlama	a092a5a846	fix: allow using distributed-config to alter self ... (skipped promtail secret)	2023-06-22 01:22:28 +02:00
oddlama	dea87afdbc	fix: invalid space in htpasswd file	2023-06-22 00:57:30 +02:00
oddlama	f0d2475f74	feat: convert all microvms to use nginx	2023-06-22 00:51:45 +02:00
oddlama	edb1d8791d	chore: include our oauth module	2023-06-21 23:58:03 +02:00
oddlama	5f02889bd0	feat: remove caddy, enable nginx with oauth2_proxy	2023-06-21 23:57:33 +02:00
oddlama	041cf9cc33	chore: remove obsolete dhparams on zackbiene	2023-06-21 23:56:57 +02:00
oddlama	609e562bec	feat: add oauth2 proxy module and simple nginx reverse proxy module	2023-06-21 23:56:12 +02:00
oddlama	e32d5575b4	fix: realize mkif earlier to disable local-vms definition	2023-06-21 01:43:00 +02:00
oddlama	b545967e7a	feat: add adguardhome microvm	2023-06-21 01:37:25 +02:00
oddlama	6b81ecd961	feat: prepare sentinel for webapp oauth2 authentication	2023-06-21 01:36:44 +02:00
oddlama	19acca7cba	chore: remove microvm local wireguard if not needed	2023-06-21 01:35:41 +02:00
oddlama	06d5d26dde	fix: apparently ':' is not a great character for basic auth	2023-06-18 16:03:41 +02:00
oddlama	d6af975817	feat: enable promtail on all vms	2023-06-18 14:31:23 +02:00
oddlama	4d5813a2ad	fix: missing protocol spec in vaultwarden domain	2023-06-18 13:15:23 +02:00
oddlama	1b42e0cd72	fix: refactoring mistakes; and add generator for initrd_host_ed25519_key	2023-06-18 12:55:18 +02:00
oddlama	abdf363fba	feat: add vaultwarden microvm	2023-06-18 01:12:08 +02:00
oddlama	25437cfdeb	add hexyl to common utils	2023-06-17 23:47:39 +02:00
oddlama	53850a4ff2	chore: remove old todo	2023-06-17 23:47:30 +02:00
oddlama	b682db7173	chore: add caddy common defaults	2023-06-17 23:46:40 +02:00
oddlama	9ed52a253c	feat: enforce deterministic user and group ids	2023-06-17 23:44:54 +02:00
oddlama	b5d2d31b69	fix: typo	2023-06-13 03:04:38 +02:00
oddlama	998d6d5348	refactor: move all proxy related configuration to the nodes that define them	2023-06-13 02:58:14 +02:00
oddlama	ead3c1696f	chore: update flake dependencies, regenerate basic auth hashes	2023-06-13 01:02:02 +02:00
oddlama	5bd65732f5	fix: distributed-config now works across microvms and colmena nodes	2023-06-13 00:17:12 +02:00
oddlama	69bd2a71ce	feat: generate secrets	2023-06-12 01:03:44 +02:00
oddlama	f33fa54b65	refactor: move relevant secrets to microvms	2023-06-12 00:32:27 +02:00
oddlama	dfe1abdfde	refactor: ward microvms are now own folders	2023-06-12 00:23:07 +02:00
oddlama	3f19475eda	wip: prepare moving microvms definitions to own folders	2023-06-12 00:21:25 +02:00
oddlama	e4199be809	chore: define registry for proxied domains	2023-06-12 00:20:45 +02:00
oddlama	2c81b11696	feat: add git fixup command	2023-06-12 00:20:32 +02:00
oddlama	46ce6ed353	feat: make promtail module reusable	2023-06-12 00:20:32 +02:00
oddlama	777d803b76	feat: add module to allow extending configuration of other nodes	2023-06-12 00:20:30 +02:00
oddlama	91306427ba	refactor: move vm definitions to own files	2023-06-11 14:42:20 +02:00
oddlama	d4b7051091	chore: refactor minimal neovim definition	2023-06-11 14:42:01 +02:00
oddlama	4abefb0811	fix: wireguard generator pipe issue	2023-06-10 02:00:08 +02:00
oddlama	e61c82ebfc	feat: generate caddy basic auth passwords using agenix-rekey	2023-06-10 00:52:17 +02:00
oddlama	cfb7c88862	feat: remove generate-wireguard-keys in favor of agenix-rekey generators	2023-06-09 23:21:18 +02:00
oddlama	dec790c589	chore: update to new agenix-rekey format	2023-06-07 19:48:15 +02:00
oddlama	972b0456da	chore: use flushBeforeStage2=true to avoid networking issues; fix loki listen address	2023-06-06 01:04:39 +02:00
oddlama	90499504b5	chore: nixpkgs bug flushBeforeStage2 required	2023-06-05 21:05:04 +02:00