|
|
0905083fb2
|
hosts/clerie-backup: Migrate secrets to sops
|
2024-05-05 14:18:43 +02:00 |
|
|
|
3533f7a8fb
|
hosts/minecraft-2: Migrate secrets to sops
|
2024-05-05 14:07:46 +02:00 |
|
|
|
972169c339
|
hosts/backup-4: Migrate secrets to sops
|
2024-05-04 14:43:33 +02:00 |
|
|
|
c8c9526241
|
hosts/storage-2: Migrate secrets to sops
|
2024-05-02 13:10:21 +02:00 |
|
|
|
3371f47f68
|
hosts/mail-2: Migrate secrets to sops
|
2024-04-28 12:23:23 +02:00 |
|
|
|
4cf47229a4
|
hosts/dn42-il-gw1: Migrate secrets to sops
|
2024-04-28 11:38:53 +02:00 |
|
|
|
8c46f57946
|
hosts/osmium: Migrate secrets to sops
|
2024-04-28 10:57:03 +02:00 |
|
|
|
67e3aa4ac1
|
hosts/web-2: Enable repo indexing in gitea
|
2024-04-28 10:13:49 +02:00 |
|
|
|
e6ed6ef0db
|
hosts/hydra-1: Disable localhost as build machine as it messes with hydra scheduling
|
2024-04-26 15:49:07 +02:00 |
|
|
|
8ba55f1049
|
hosts/hydra-1: Move nix cache config to seperate file
|
2024-04-22 20:51:23 +02:00 |
|
|
|
c7769eaecb
|
hosts/hydra-1: Move build machine config to seperate file
|
2024-04-22 20:47:11 +02:00 |
|
|
|
2d45cb826b
|
hosts/hydra-1: Move hydra config to seperate file
|
2024-04-22 20:42:23 +02:00 |
|
|
|
7ead072e53
|
configuration/hydra-build-machine: Move build machine related config to common configuration
|
2024-04-22 20:34:42 +02:00 |
|
|
|
cf9b4a9cd4
|
hosts/hydra-1: Fix hydra cannot connect to localhost as buildmachine
|
2024-04-22 20:19:48 +02:00 |
|
|
|
2eb575a104
|
hosts/gatekeeper: Migrate secrets to sops
|
2024-04-21 19:49:00 +02:00 |
|
|
|
23cae87333
|
hosts/dn42-il-gw6: Migrate secrets to sops
|
2024-04-21 19:31:18 +02:00 |
|
|
|
2b00410eeb
|
hosts/dn42-il-gw5: Migrate secrets to sops
|
2024-04-21 19:26:05 +02:00 |
|
|
|
a588853b79
|
hosts/dn42-ildix-clerie: Migrate secrets to sops
|
2024-04-21 19:20:53 +02:00 |
|
|
|
2775acdb48
|
hosts/monitoring-3: Migrate secrets to sops
|
2024-04-21 19:15:15 +02:00 |
|
|
|
7ad061292d
|
hosts/porter: Migrate secrets to sops
|
2024-04-21 19:05:49 +02:00 |
|
|
|
9514d0c72a
|
hosts/nonat: Migrate secrets to sops
|
2024-04-21 18:56:02 +02:00 |
|
|
|
42cde57e8d
|
hosts/hydra-2: Migrate secrets to sops
|
2024-04-21 18:51:40 +02:00 |
|
|
|
f252ab71eb
|
hosts/hydra-1: Migrate secrets to sops
|
2024-04-21 18:45:15 +02:00 |
|
|
|
7e5a2fa2ec
|
hosts/astatine: Migrate secrets to sops
|
2024-04-21 18:22:36 +02:00 |
|
|
|
b5fca78654
|
hosts/dn42-ildix-service: Remove obsolete age secrets
|
2024-04-21 15:54:33 +02:00 |
|
|
|
22512de722
|
lib/flake-helper.nix: Automatically load sops secrets
|
2024-04-21 15:51:25 +02:00 |
|
|
|
63c60391cc
|
pkgs/clerie-sops: Init sops
|
2024-04-20 23:20:14 +02:00 |
|
|
|
84b67ee47d
|
hosts/monitoring-3: Enable reloading of prometheus
|
2024-04-20 17:53:05 +02:00 |
|
|
|
04ab06218c
|
hosts/dn42-ildix-clerie,hosts/dn42-ildix-service: Add to monitoring and enable auto updates
|
2024-04-20 15:01:37 +02:00 |
|
|
|
ab4b4918a0
|
hosts/web-2: Set proper root path for gpg key discovery
|
2024-04-17 16:20:14 +02:00 |
|
|
|
95379f15dd
|
users/clerie,hosts/web-2: publish new keys for clerie
|
2024-04-16 22:28:26 +02:00 |
|
|
|
2ae649af80
|
configuration/gpg-ssh: Move GPG and SSH integration to seperate module
|
2024-04-15 08:44:09 +02:00 |
|
|
|
128f2360c7
|
hosts/hydra-1,hosts/hydra-2: Allow git via http in restricted mode
|
2024-04-08 08:16:29 +02:00 |
|
|
|
0b7f25e017
|
hosts/hydra-1,hosts/hydra-2: Allow http as schema in restricted mode and not only as prefix
|
2024-04-07 20:36:50 +02:00 |
|
|
|
5aac90a1fa
|
hosts/hydra-1,hosts/hydra-2: Allow github uri in restricted mode
|
2024-04-07 20:03:10 +02:00 |
|
|
|
f0d82c45fb
|
hosts/web-2: Add md.clerie.de
|
2024-04-02 22:14:17 +02:00 |
|
|
|
df6a540281
|
hosts/monitoring-3: Fix IPv6 listen addr for Grafana
|
2024-03-27 19:11:02 +01:00 |
|
|
|
50066d1122
|
hosts/web-2: postgresql migrate to ensureDBOwnership
|
2024-03-24 14:35:31 +01:00 |
|
|
|
db58f552b2
|
hosts/web-2: fix systemd service dependencies for chaosevents
|
2024-03-24 14:20:34 +01:00 |
|
|
|
0cd3c05a25
|
hosts/web-2: migrate renamed options for gitea
|
2024-03-24 14:08:34 +01:00 |
|
|
|
fe85ab718a
|
hosts/storage-2: migrate renamed options
|
2024-03-24 13:26:26 +01:00 |
|
|
|
4f96034838
|
hosts/monitoring-3: add prometheus job for high frequency pings
|
2024-03-24 13:03:23 +01:00 |
|
|
|
3c42d25ecd
|
hosts/monitoring-3: migrate renamed options
|
2024-03-24 13:01:32 +01:00 |
|
|
|
62dd3b7471
|
hosts: remove deprecated grub version option
|
2024-03-19 19:37:43 +01:00 |
|
|
|
9bc4ba3b77
|
pkgs/print-afra: Add script for printing pdf in AfRA
|
2024-03-19 17:51:59 +01:00 |
|
|
|
7a4177f360
|
pkgs/nixfiles: rename nixfiles-updated-inputs to clerie-update-nixfiles
|
2024-03-17 16:14:54 +01:00 |
|
|
|
5b8b8f8cab
|
pkgs/chromium-incognito: add package
|
2024-03-17 14:24:06 +01:00 |
|
|
|
f011e3fc9e
|
modules/nixfiles/nixfiles-system-upgrade.nix,modules/clerie-system-upgrade: rename module
|
2024-03-14 20:30:37 +01:00 |
|
|
|
f34337159d
|
pkgs/wetter: remove package
|
2024-03-14 20:12:41 +01:00 |
|
|
|
07609fb02d
|
hosts/storage-2: add firmware.clerie.de
|
2024-03-02 16:28:45 +01:00 |
|
|
|
ffdc95da84
|
hosts/astatine: Isolate ppp interface
|
2024-03-01 22:02:36 +01:00 |
|
|
|
a5c2009bfd
|
hosts/astatine: remove mtu option so client uses mru sent by provider
|
2024-03-01 22:02:36 +01:00 |
|
|
|
991b4d6bd1
|
hosts/astatine: enable remote wireshark capture
|
2024-03-01 22:02:36 +01:00 |
|
|
|
70a663b633
|
hosts/astatine: ppp test
|
2024-03-01 22:02:36 +01:00 |
|
|
|
d33293e00a
|
hosts/krypton: Add fractal
|
2024-02-19 21:16:41 +01:00 |
|
|
|
a84ae9372e
|
hosts/minecraft-2,hosts/storage-2: Enable auto update
|
2024-02-18 16:47:54 +01:00 |
|
|
|
15670ff541
|
hosts/storage-2: Replace prepare script with tmpfiles
|
2024-02-18 14:58:45 +01:00 |
|
|
|
692da961d8
|
hosts/web-2: Remove znc
|
2024-02-18 14:40:26 +01:00 |
|
|
|
0118788e82
|
hosts/web-2: Update chaosevents
|
2024-02-17 18:55:30 +01:00 |
|
|
|
0cf25afdc7
|
hosts/krypton: Remove archroot mount point
|
2024-02-13 11:12:11 +01:00 |
|
|
|
2fe4da7c4a
|
hosts/krypton: add okular
|
2024-02-12 19:12:03 +01:00 |
|
|
|
bf7205f2be
|
hosts/web-2: Update clerie.de
|
2024-02-09 21:28:20 +01:00 |
|
|
|
204303beee
|
hosts/zinc: add cryptsetup-askpass to .ash_history for faster access
|
2024-02-07 18:52:14 +01:00 |
|
|
|
bfdfc7ee68
|
hosts/zinc: custom network setup in initrd
|
2024-02-07 18:42:30 +01:00 |
|
|
|
bdb78d60c1
|
hosts/zinc: add cura slicer
|
2024-02-07 17:36:00 +01:00 |
|
|
|
022fabb0f7
|
hosts/zinc: Add programs
|
2024-02-07 17:35:28 +01:00 |
|
|
|
7f6bfafbcf
|
hosts/carbon: Set correct MTU
|
2024-02-07 12:25:52 +01:00 |
|
|
|
5b3933937e
|
hosts/krypton: add network debug tools
|
2024-01-30 15:03:06 +01:00 |
|
|
|
da76595558
|
hosts/osmium: Polkit test
|
2024-01-30 09:53:27 +01:00 |
|
|
|
2ac1cc6fed
|
hosts/krypton: enable wireshark
|
2024-01-20 20:58:51 +01:00 |
|
|
|
bc35fbb0d6
|
host/monitoring: Use correct variable in alerting rule description
|
2024-01-15 18:08:23 +01:00 |
|
|
|
568d3f8d89
|
hosts/krypton: Turn on keyboard backlight and display battery levels at cryptsetup askpass
|
2024-01-08 15:44:28 +01:00 |
|
|
|
9284723eae
|
hosts/storage-2: Deactivate kraftfuttermischwerk sync
|
2024-01-05 19:47:37 +01:00 |
|
|
|
b17c444ae2
|
hosts/carbon: make router usable without a switch
|
2023-12-20 18:33:12 +01:00 |
|
|
|
98de6489f3
|
modules/nixfiles: Deploy system upgrade unit everywhere so updates can get startet remotely
|
2023-12-15 20:20:53 +01:00 |
|
|
|
d05f74ece9
|
modules/nixfiles: Specify dedicated system update times per host
|
2023-12-15 18:58:01 +01:00 |
|
|
|
0ea664287b
|
users/isa: Move to users directory
|
2023-12-07 20:21:44 +01:00 |
|
|
|
01b1ce3caa
|
pkgs/nixfiles: rename nixfiles-system-sync-to-hydra to nixfiles-system-upgrade
|
2023-12-01 18:02:44 +01:00 |
|
|
|
cff95863fd
|
hosts/monitoring-3: Add alert for Synapse
|
2023-12-01 17:50:54 +01:00 |
|
|
|
2e68d00ca4
|
hosts/gatekeeper: update pubkey amy
|
2023-11-23 17:21:45 +01:00 |
|
|
|
203032d9f3
|
hosts/gatekeeper: add amy to wg-clrie
|
2023-11-22 21:38:31 +01:00 |
|
|
|
572fb59903
|
hosts/dn42-il-gw5,hosts/dn42-il-gw6: export routes to looking glass
|
2023-11-21 15:16:16 +01:00 |
|
|
|
5ad39391cf
|
hosts/schule: remove host
|
2023-11-07 19:27:01 +01:00 |
|
|
|
9f77f2594c
|
hosts/dn42-il-gw1,hosts/dn42-il-gw5,hosts/dn42-il-gw6,hosts/nonat: enable auto update
|
2023-11-05 22:30:31 +01:00 |
|
|
|
5fc75da28c
|
hosts/zinc: enforce password for sudo
|
2023-11-05 13:41:46 +01:00 |
|
|
|
226e4198e0
|
hosts/monitoring-3: add synapse monitoring
|
2023-11-05 13:36:58 +01:00 |
|
|
|
4d4c5eed8c
|
hosts/monitoring-3: add matrix server ping targets
|
2023-11-04 14:10:51 +01:00 |
|
|
|
43335679ed
|
hosts/astatine: add user criese-nethinks
|
2023-10-29 20:06:30 +01:00 |
|
|
|
c013c4323a
|
hosts/web-2: add install.nix.clerie.de
|
2023-10-25 21:45:38 +02:00 |
|
|
|
36e6d96d2c
|
hosts/krypton: enable binfmt virt for aarch64-linux
|
2023-10-25 18:25:15 +02:00 |
|
|
|
5d870740b6
|
hosts/web-2: return known_hosts with proper mime type
|
2023-10-22 21:58:54 +02:00 |
|
|
|
24b8e750b5
|
pkgs/nixfiles: move nixfiles-auto-install to pkg
|
2023-10-20 23:45:43 +02:00 |
|
|
|
219c356e83
|
hosts/krypton: Update system
|
2023-10-17 16:45:09 +02:00 |
|
|
|
2e390e9ef9
|
hosts/web-2: update clerie.de
|
2023-10-12 22:16:44 +02:00 |
|
|
|
7ca735fa6d
|
hosts/zinc: make sudo not require a password
|
2023-09-23 19:36:27 +02:00 |
|
|
|
9d310e9e8f
|
hosts/zinc: enable gnome desktop
|
2023-09-23 17:55:26 +02:00 |
|
|
|
c2b1697fb5
|
hosts/zinc: move initrd stuff to seperate file
|
2023-09-22 21:00:43 +02:00 |
|
|
|
ac40659050
|
hosts/zinc: enable 5g modem via usb
|
2023-09-22 20:55:43 +02:00 |
|
|
|
3fb56cd9f3
|
host/zinc: rotate ssh host key
|
2023-09-22 20:30:35 +02:00 |
|
|
|
c46a031b39
|
modules/wireguard-initrd: add module for wireguard in initrd
|
2023-09-22 16:56:09 +02:00 |
|
