Commit graph

288 commits

Author SHA1 Message Date
oddlama
80e7c1bdbf
refactor: finish decoupling the library functions from config 2023-07-01 01:11:58 +02:00
oddlama
68bb9731d3
wip: remove very specific special args and unify library functions 2023-06-30 01:55:17 +02:00
oddlama
dfc3084fe9
docs: minor additions 2023-06-29 01:19:46 +02:00
oddlama
e534bdd38b
docs: add hosts table 2023-06-29 01:05:51 +02:00
oddlama
84ac34cb6c
refactor: major refactor into proper reusable modules. No logical changes. 2023-06-29 00:27:54 +02:00
oddlama
04872f6ec5
chore: clean up old nom config 2023-06-25 22:59:13 +02:00
oddlama
9a810bd125
feat: convert nom to disko 2023-06-25 22:58:11 +02:00
oddlama
02a8544825
chore: remove recursive-nix 2023-06-25 22:57:43 +02:00
oddlama
5bc7fa310b
chore: disable autoSubUidGidRange for determinism 2023-06-25 22:56:53 +02:00
oddlama
1aa2a8d8b7
chore: unfortunately basic-auth conflicts with influxdb 2023-06-25 14:59:41 +02:00
oddlama
10a52642ad
chore: test basic auth with influx, but seems to conflict with internal auth 2023-06-25 14:37:25 +02:00
oddlama
6e15d49cbc
fix: missing https scheme in telegraf output influxdb 2023-06-25 02:56:16 +02:00
oddlama
f606e6e554
feat: enable telegraf on all server nodes; add 10 minute autorestart 2023-06-25 02:34:05 +02:00
oddlama
b8f647fb4a
feat: add telegraf module 2023-06-25 00:44:04 +02:00
oddlama
df2e046295
chore: disable auto login on oauth2-proxy and grafana (better for sign-out) 2023-06-23 23:27:34 +02:00
oddlama
ccd62a730a
feat: add influxdb microvm 2023-06-23 18:07:54 +02:00
oddlama
eb9ee0bf0d
feat: patch oauth2-proxy to support scopes as groups 2023-06-23 15:20:58 +02:00
oddlama
1a0378ee5c
feat: use nginx json logs; oauth2-proxy authentication working, groups not yet 2023-06-23 00:40:15 +02:00
oddlama
71dbda6262
feat: promote oauth proxy config to a nginx virtualHosts option 2023-06-22 02:55:22 +02:00
oddlama
a092a5a846
fix: allow using distributed-config to alter self
(skipped promtail secret)
2023-06-22 01:22:28 +02:00
oddlama
dea87afdbc
fix: invalid space in htpasswd file 2023-06-22 00:57:30 +02:00
oddlama
f0d2475f74
feat: convert all microvms to use nginx 2023-06-22 00:51:45 +02:00
oddlama
edb1d8791d
chore: include our oauth module 2023-06-21 23:58:03 +02:00
oddlama
5f02889bd0
feat: remove caddy, enable nginx with oauth2_proxy 2023-06-21 23:57:33 +02:00
oddlama
041cf9cc33
chore: remove obsolete dhparams on zackbiene 2023-06-21 23:56:57 +02:00
oddlama
609e562bec
feat: add oauth2 proxy module and simple nginx reverse proxy module 2023-06-21 23:56:12 +02:00
oddlama
e32d5575b4
fix: realize mkif earlier to disable local-vms definition 2023-06-21 01:43:00 +02:00
oddlama
b545967e7a
feat: add adguardhome microvm 2023-06-21 01:37:25 +02:00
oddlama
6b81ecd961
feat: prepare sentinel for webapp oauth2 authentication 2023-06-21 01:36:44 +02:00
oddlama
19acca7cba
chore: remove microvm local wireguard if not needed 2023-06-21 01:35:41 +02:00
oddlama
06d5d26dde
fix: apparently ':' is not a great character for basic auth 2023-06-18 16:03:41 +02:00
oddlama
d6af975817
feat: enable promtail on all vms 2023-06-18 14:31:23 +02:00
oddlama
4d5813a2ad
fix: missing protocol spec in vaultwarden domain 2023-06-18 13:15:23 +02:00
oddlama
1b42e0cd72
fix: refactoring mistakes; and add generator for initrd_host_ed25519_key 2023-06-18 12:55:18 +02:00
oddlama
abdf363fba
feat: add vaultwarden microvm 2023-06-18 01:12:08 +02:00
oddlama
25437cfdeb
add hexyl to common utils 2023-06-17 23:47:39 +02:00
oddlama
53850a4ff2
chore: remove old todo 2023-06-17 23:47:30 +02:00
oddlama
b682db7173
chore: add caddy common defaults 2023-06-17 23:46:40 +02:00
oddlama
9ed52a253c
feat: enforce deterministic user and group ids 2023-06-17 23:44:54 +02:00
oddlama
b5d2d31b69
fix: typo 2023-06-13 03:04:38 +02:00
oddlama
998d6d5348
refactor: move all proxy related configuration to the nodes that define them 2023-06-13 02:58:14 +02:00
oddlama
ead3c1696f
chore: update flake dependencies, regenerate basic auth hashes 2023-06-13 01:02:02 +02:00
oddlama
5bd65732f5
fix: distributed-config now works across microvms and colmena nodes 2023-06-13 00:17:12 +02:00
oddlama
69bd2a71ce
feat: generate secrets 2023-06-12 01:03:44 +02:00
oddlama
f33fa54b65
refactor: move relevant secrets to microvms 2023-06-12 00:32:27 +02:00
oddlama
dfe1abdfde
refactor: ward microvms are now own folders 2023-06-12 00:23:07 +02:00
oddlama
3f19475eda
wip: prepare moving microvms definitions to own folders 2023-06-12 00:21:25 +02:00
oddlama
e4199be809
chore: define registry for proxied domains 2023-06-12 00:20:45 +02:00
oddlama
2c81b11696
feat: add git fixup command 2023-06-12 00:20:32 +02:00
oddlama
46ce6ed353
feat: make promtail module reusable 2023-06-12 00:20:32 +02:00