1
0
Commit Graph

888 Commits

Author SHA1 Message Date
dd20c29c70 hosts/mail-2: enable docker 2023-05-20 17:52:03 +02:00
196fcf30a0 hosts/mail-2: add ssh pubkey 2023-05-20 17:35:39 +02:00
546ff35f33 flake.nix: sorted host configs 2023-05-20 17:34:02 +02:00
919e054d6f host/mail-2: add host 2023-05-20 17:20:33 +02:00
b03421ec96 Fix backup secrets generation script to actually append new secrets to htaccess files 2023-05-19 22:28:38 +02:00
4f01b4a8a1 hosts/clerie-backup,host/backup-4: restore missing htpasswd entries 2023-05-19 20:57:44 +02:00
628cc524a7 hosts/web-2: migrate to clerie-backup 2023-05-19 20:40:14 +02:00
1f21c2b911 Add script for backup secrets generation 2023-05-19 20:38:40 +02:00
b7c8ad09b6 configuration/common: force reigistry pinning for nixpkgs 2023-05-19 16:15:28 +02:00
6e2537341e configuration/common: pin nixpkgs to host version for nix commands 2023-05-19 10:06:47 +02:00
05a2742a91 modules/backup: add backup module using restic 2023-05-16 12:21:11 +02:00
2ab99d861a module/backup: remove backup module commited by accident 2023-05-16 09:48:34 +02:00
5fa2b58c3d hosts/backup-4: fix path to backup htpasswd 2023-05-16 09:28:44 +02:00
d241370821 hosts/clerie-backup,hosts/backup-4: change backup credentials for minecraft-2 2023-05-16 09:27:44 +02:00
98705a218c hosts/storage-2: set secrets permissions for nginx htpasswd 2023-05-16 08:13:12 +02:00
0393d26e71 flake.nix: update nixos-exporter and use provided modules 2023-05-09 11:56:53 +02:00
b4c5dc7c25 hosts/minecraft-2: test restic backup 2023-05-06 18:24:52 +02:00
2feb1b2b4c modules/monitoring: specify custom privateKeyFile path for wg-monitoring 2023-05-06 16:11:49 +02:00
f8328936b9 hosts/astatine: add monitoring secret 2023-05-06 15:40:42 +02:00
398067f533 hosts/monitoring-3: alert on averaged metrics 2023-05-04 14:43:14 +02:00
4834e5b91d hosts/dn42-ildix-service: add lookingglass 2023-05-04 14:35:30 +02:00
e9de141316 hosts/monioring-3: add more ping targets 2023-05-03 16:20:02 +02:00
14d48882ad modules/monitoring: acutally use secrets added for monitoring 2023-05-02 20:55:32 +02:00
a2deec6dfb hosts/web-2: radicale use secrets 2023-05-02 20:52:00 +02:00
bf0a8a31c3 hosts/storage-2: use secrets for basic auth 2023-05-02 20:40:30 +02:00
b60824e796 hosts/monitoring-3: use xmpp password from secrets 2023-05-02 20:27:03 +02:00
9982a4d710 hosts/hydra: use secrets for nix-cache 2023-05-02 20:14:02 +02:00
9d6a7b1c88 hosts/gatekeeper: add vpn secret 2023-05-02 19:57:21 +02:00
a34a637f48 hosts/dn42-il-gw1: migrate peering secrets to age 2023-05-02 19:52:02 +02:00
dcf8bc4035 modules/monitoring: migrate monitoring vpn secrets to age 2023-05-02 19:42:46 +02:00
cb12fb64cb hosts/web-2: expose know_hosts 2023-05-02 18:01:39 +02:00
d068fea2ce Add ssh public host keys 2023-05-02 10:33:56 +02:00
1cd9f1e52d hosts/backup-4: use secrets 2023-05-01 15:34:43 +02:00
809e8652ff secrets.nix: note down what happends 2023-05-01 15:19:59 +02:00
1b8b074dc5 secrets: automatically detect and configure secrets 2023-05-01 15:08:54 +02:00
ad3d98f637 configuration/common: add agenix to environment 2023-05-01 12:29:55 +02:00
bcbb1e364f configuration/common, users/clerie: move user config to seperate directory 2023-05-01 12:23:09 +02:00
d2472c79ee lib/flake-helper.nix: Automatically load secrets from hosts secrets directory 2023-05-01 12:09:47 +02:00
09b043c26c Introduce agenix secrets management 2023-05-01 11:37:33 +02:00
ce766a8f90 configuration/common: add additional ssh key for clerie 2023-04-30 20:58:28 +02:00
33db62362f modules/monitoring-3: expose systemd units 2023-04-30 20:57:42 +02:00
f2d91c9820 hosts/dn42-il-gw1: e1mo endpoind changed 2023-04-30 19:25:02 +02:00
56a34de0cb hosts/clerie-backup,hosts/backup-4: add restic server backup nodes 2023-04-30 19:24:18 +02:00
f8ab76d163 hosts/storage-2: expose media directory via http 2023-04-29 21:03:02 +02:00
c2786dbeb3 hosts/storage-2: cleanup unused services 2023-04-29 18:56:50 +02:00
7570974a67 hosts/clerie-backup: swap backup storage 2023-04-25 14:46:49 +02:00
4647bf8d48 hosts/nonat: add blackbox exporter 2023-04-24 21:00:35 +02:00
c8acc39d8d modules/wg-clerie: add module for public IPv6 vpn 2023-04-23 15:31:54 +02:00
93f1fa77e0 hosts/palladium: prevent borg filling up root partition 2023-04-23 15:00:42 +02:00
882df0098f hosts/monitoring-3: alert for all storage drives when they are full 2023-04-22 18:30:51 +02:00