Commit graph

38 commits

Author SHA1 Message Date
4716f8a398 feat(modules): Replace dgn-secrets by age-secrets
All checks were successful
build configuration / build_compute01 (push) Successful in 1m6s
build configuration / build_storage01 (push) Successful in 44s
build configuration / build_web01 (push) Successful in 57s
npins update / npins_update (push) Successful in 46s
2024-01-09 14:48:33 +01:00
7249301a33 fix(network): Use correct ipv6 addresses 2024-01-08 17:18:55 +01:00
c5e15987ed feat(modules/dgn-console): Add an activation script showing system diffs
All checks were successful
build configuration / build_storage01 (push) Successful in 49s
build configuration / build_compute01 (push) Successful in 1m11s
build configuration / build_web01 (push) Successful in 1m31s
ds-fr update / npins_update (push) Successful in 2m21s
2024-01-07 18:17:14 +01:00
03d4fd3982 feat(fail2ban): Add preauth jail and enable on storage01
All checks were successful
build configuration / build_web01 (push) Successful in 45s
build configuration / build_storage01 (push) Successful in 56s
build configuration / build_compute01 (push) Successful in 1m13s
2024-01-05 16:10:06 +01:00
Tom Hubrecht
9b49bd2721 feat(dgn-runners): Add curl and link usr/bin/env to bin/env for compatibility with nixos 2023-12-22 18:23:48 +01:00
Tom Hubrecht
011e52083b feat(dgn-runners): Install openssh 2023-12-15 23:39:49 +01:00
Tom Hubrecht
34e3953418 fix(dgn-runners): Set NIX_PATH to current version 2023-12-15 20:45:54 +01:00
Tom Hubrecht
8cef4a594a feat(dgn-runners): Init module for runners with a store 2023-12-15 20:10:09 +01:00
Tom Hubrecht
45edfee048 feat(hardware): Add kernelParams for all machines so that virtualisation is possible 2023-12-11 01:05:05 +01:00
Tom Hubrecht
b338eeed6a fix(network): Add dns servers on the main interface 2023-12-04 12:36:34 +01:00
Tom Hubrecht
18b6b0f605 feat(modules/dgn-harware): Refactor hardware config 2023-11-29 16:11:35 +01:00
Tom Hubrecht
7e5920fd16 feat(modules/dgn-console): Add a pg upgrade script when necessary 2023-11-29 14:58:05 +01:00
Tom Hubrecht
fa799c9dda feat(modules): Deploy fail2ban 2023-11-28 20:51:23 +01:00
Tom Hubrecht
2ffae107e6 fix(dgn-network): Don't log refused connections 2023-11-13 14:21:52 +01:00
sinavir
c30d8961b9 fix(vm builds): Add vmvariant to have working dns in vm 2023-10-27 14:36:19 +02:00
Tom Hubrecht
a4ad7810ae fix(nsncd): Update source 2023-10-26 14:18:36 +02:00
Tom Hubrecht
86129fb971 feat(nix-lib): Rename dgn-lib to lib.extra 2023-10-04 09:23:48 +02:00
Tom Hubrecht
5622bc3748 feat(dgn-secrets): Add a matches option
This option allows specifying regexes tied to options.
When a secret matches a pattern, the the options are applied to it.
2023-10-02 22:48:18 +02:00
Tom Hubrecht
958afe957f feat(modules): Init dgn-web
Add a module to enable recommended web settings
2023-10-01 23:08:54 +02:00
Tom Hubrecht
ef9f84430e feat(storage01): Deploy atticd on cachix.dgnum.eu 2023-09-28 17:20:16 +02:00
Tom Hubrecht
c6121e63d7 modules/dgn-secrets: Fix options 2023-07-24 09:50:33 +02:00
Tom Hubrecht
c2616ce4f5 modules/dgn-dns: init
Also deploy a DNS server on compute01
2023-07-21 00:37:05 +02:00
Tom Hubrecht
fef1e90386 modules/dgn-console: Update hostname display 2023-07-20 15:48:24 +02:00
Tom Hubrecht
2274668f9b modules: Setup dgn-network with configuration from metadata 2023-07-20 12:32:31 +02:00
Tom Hubrecht
58e269d7f2 modules: Fix typos 2023-07-18 17:07:14 +02:00
Tom Hubrecht
c111662a9e modules/dgn-hardware: Set default configurations 2023-07-18 17:03:01 +02:00
Tom Hubrecht
935d4a5ee5 modules: Use inherit instead of with 2023-07-18 17:00:51 +02:00
Tom Hubrecht
5b4cf12ed7 machines: Add compute01 and storage01 2023-07-18 17:00:31 +02:00
Tom Hubrecht
5a0e196658 modules/dgn-access-control: Add license 2023-06-30 18:39:38 +02:00
Tom Hubrecht
6003afb8b8 modules: Add new modules and agenix 2023-06-30 18:39:20 +02:00
Tom Hubrecht
4b610d0b80 modules/dgn-ssh: Update settings 2023-06-30 18:38:23 +02:00
Tom Hubrecht
9e18e8e078 modules/dgn-secrets: Init
Add a way to simplify secrets imports
2023-06-30 18:38:10 +02:00
Tom Hubrecht
94305d2723 modules/dgn-acme: Init 2023-06-30 18:37:44 +02:00
sinavir
5bc379c1d1 document access control 2023-05-22 21:23:33 +02:00
Tom Hubrecht
a7ce39a2f5 modules/dgn-ssh: Add default ssh configuration for all nodes 2023-05-22 15:21:25 +00:00
Tom Hubrecht
8a65ff477d modules/dgn-access-control: Use getAllKeys instead of getKeyFiles 2023-05-22 16:28:18 +02:00
Tom Hubrecht
be29da5e7e modules/dgn-access-control: Fix keys 2023-05-22 15:58:41 +02:00
Tom Hubrecht
24500ed369 modules: Init with access control 2023-05-22 15:07:03 +02:00