|
|
ba30b3034b
|
feat(dgn-backups): Add encrypted master keys
|
2024-02-22 09:57:19 +01:00 |
|
|
|
a14e853738
|
feat(dgn-backups): Alter start times
|
2024-02-21 22:42:41 +01:00 |
|
|
|
6161592f5a
|
feat(dgn-backups): Setup postgres databases backups
|
2024-02-21 22:01:32 +01:00 |
|
|
|
6b827e56b1
|
feat(infra): Init backups
|
2024-02-21 17:18:14 +01:00 |
|
|
|
13b7b2fab4
|
feat(dgn-hardware): Update ZFS settings
|
2024-02-21 17:17:40 +01:00 |
|
|
|
54ec4a6b18
|
feat(dgn-hardware): Factorize bcachefs setup
|
2024-02-20 21:25:04 +01:00 |
|
|
|
5832da0941
|
feat(dgn-network): Use only the specified DNS
|
2024-02-20 17:57:24 +01:00 |
|
|
|
e7f4d76dc1
|
fix(dgn-network): Clarify variables and add dns settings from metadata
|
2024-02-20 17:47:34 +01:00 |
|
|
|
5e3819c9b2
|
feat(shell): Add pre-commit hooks and reformat the repo
|
2024-02-02 10:51:31 +01:00 |
|
|
|
ce0dfe5431
|
chore(infra): Remove remnants of dgn-dns
|
2024-02-01 13:35:30 +01:00 |
|
|
|
31e2387a25
|
feat(dgn-dns): Remove module as the DNS will be hosted externally
|
2024-01-31 16:52:00 +01:00 |
|
|
|
ef460753a8
|
feat(modules/dgn-ssh): Disable kbdinteractiveauthentication
|
2024-01-30 10:22:27 +01:00 |
|
|
|
6bdbccf9b2
|
feat(web01): Deploy Crab Fit on meet.dgnum.eu
|
2024-01-23 01:06:10 +01:00 |
|
Raito Bezarius
|
1f67e3c310
|
feat(dns): erp.dgnum.eu → web01
We prepare a Dolibarr deployment.
|
2024-01-21 21:05:46 +01:00 |
|
|
|
e34d5d003f
|
feat(dgn-hardware): Move specific configurations back to the servers
|
2024-01-11 12:58:58 +01:00 |
|
|
|
345bdd4d44
|
feat(dgn-hardware): Allow bcachefs configuration
|
2024-01-11 12:58:27 +01:00 |
|
|
|
50368c56dd
|
fix(modules/dgn-console): Only try to create the psql migrate script if postgres is enabled
|
2024-01-10 14:59:39 +01:00 |
|
|
|
df8831301f
|
feat(storage01): Switch to nix-modules for forgejo nix runners
|
2024-01-10 13:59:11 +01:00 |
|
|
|
4716f8a398
|
feat(modules): Replace dgn-secrets by age-secrets
|
2024-01-09 14:48:33 +01:00 |
|
|
|
7249301a33
|
fix(network): Use correct ipv6 addresses
|
2024-01-08 17:18:55 +01:00 |
|
|
|
c5e15987ed
|
feat(modules/dgn-console): Add an activation script showing system diffs
|
2024-01-07 18:17:14 +01:00 |
|
|
|
03d4fd3982
|
feat(fail2ban): Add preauth jail and enable on storage01
|
2024-01-05 16:10:06 +01:00 |
|
Tom Hubrecht
|
9b49bd2721
|
feat(dgn-runners): Add curl and link usr/bin/env to bin/env for compatibility with nixos
|
2023-12-22 18:23:48 +01:00 |
|
Tom Hubrecht
|
011e52083b
|
feat(dgn-runners): Install openssh
|
2023-12-15 23:39:49 +01:00 |
|
Tom Hubrecht
|
34e3953418
|
fix(dgn-runners): Set NIX_PATH to current version
|
2023-12-15 20:45:54 +01:00 |
|
Tom Hubrecht
|
8cef4a594a
|
feat(dgn-runners): Init module for runners with a store
|
2023-12-15 20:10:09 +01:00 |
|
Tom Hubrecht
|
45edfee048
|
feat(hardware): Add kernelParams for all machines so that virtualisation is possible
|
2023-12-11 01:05:05 +01:00 |
|
Tom Hubrecht
|
b338eeed6a
|
fix(network): Add dns servers on the main interface
|
2023-12-04 12:36:34 +01:00 |
|
Tom Hubrecht
|
18b6b0f605
|
feat(modules/dgn-harware): Refactor hardware config
|
2023-11-29 16:11:35 +01:00 |
|
Tom Hubrecht
|
7e5920fd16
|
feat(modules/dgn-console): Add a pg upgrade script when necessary
|
2023-11-29 14:58:05 +01:00 |
|
Tom Hubrecht
|
fa799c9dda
|
feat(modules): Deploy fail2ban
|
2023-11-28 20:51:23 +01:00 |
|
Tom Hubrecht
|
2ffae107e6
|
fix(dgn-network): Don't log refused connections
|
2023-11-13 14:21:52 +01:00 |
|
sinavir
|
c30d8961b9
|
fix(vm builds): Add vmvariant to have working dns in vm
|
2023-10-27 14:36:19 +02:00 |
|
Tom Hubrecht
|
a4ad7810ae
|
fix(nsncd): Update source
|
2023-10-26 14:18:36 +02:00 |
|
Tom Hubrecht
|
86129fb971
|
feat(nix-lib): Rename dgn-lib to lib.extra
|
2023-10-04 09:23:48 +02:00 |
|
Tom Hubrecht
|
5622bc3748
|
feat(dgn-secrets): Add a matches option
This option allows specifying regexes tied to options.
When a secret matches a pattern, the the options are applied to it.
|
2023-10-02 22:48:18 +02:00 |
|
Tom Hubrecht
|
958afe957f
|
feat(modules): Init dgn-web
Add a module to enable recommended web settings
|
2023-10-01 23:08:54 +02:00 |
|
Tom Hubrecht
|
ef9f84430e
|
feat(storage01): Deploy atticd on cachix.dgnum.eu
|
2023-09-28 17:20:16 +02:00 |
|
Tom Hubrecht
|
c6121e63d7
|
modules/dgn-secrets: Fix options
|
2023-07-24 09:50:33 +02:00 |
|
Tom Hubrecht
|
c2616ce4f5
|
modules/dgn-dns: init
Also deploy a DNS server on compute01
|
2023-07-21 00:37:05 +02:00 |
|
Tom Hubrecht
|
fef1e90386
|
modules/dgn-console: Update hostname display
|
2023-07-20 15:48:24 +02:00 |
|
Tom Hubrecht
|
2274668f9b
|
modules: Setup dgn-network with configuration from metadata
|
2023-07-20 12:32:31 +02:00 |
|
Tom Hubrecht
|
58e269d7f2
|
modules: Fix typos
|
2023-07-18 17:07:14 +02:00 |
|
Tom Hubrecht
|
c111662a9e
|
modules/dgn-hardware: Set default configurations
|
2023-07-18 17:03:01 +02:00 |
|
Tom Hubrecht
|
935d4a5ee5
|
modules: Use inherit instead of with
|
2023-07-18 17:00:51 +02:00 |
|
Tom Hubrecht
|
5b4cf12ed7
|
machines: Add compute01 and storage01
|
2023-07-18 17:00:31 +02:00 |
|
Tom Hubrecht
|
5a0e196658
|
modules/dgn-access-control: Add license
|
2023-06-30 18:39:38 +02:00 |
|
Tom Hubrecht
|
6003afb8b8
|
modules: Add new modules and agenix
|
2023-06-30 18:39:20 +02:00 |
|
Tom Hubrecht
|
4b610d0b80
|
modules/dgn-ssh: Update settings
|
2023-06-30 18:38:23 +02:00 |
|
Tom Hubrecht
|
9e18e8e078
|
modules/dgn-secrets: Init
Add a way to simplify secrets imports
|
2023-06-30 18:38:10 +02:00 |
|
Tom Hubrecht
|
94305d2723
|
modules/dgn-acme: Init
|
2023-06-30 18:37:44 +02:00 |
|
sinavir
|
5bc379c1d1
|
document access control
|
2023-05-22 21:23:33 +02:00 |
|
Tom Hubrecht
|
a7ce39a2f5
|
modules/dgn-ssh: Add default ssh configuration for all nodes
|
2023-05-22 15:21:25 +00:00 |
|
Tom Hubrecht
|
8a65ff477d
|
modules/dgn-access-control: Use getAllKeys instead of getKeyFiles
|
2023-05-22 16:28:18 +02:00 |
|
Tom Hubrecht
|
be29da5e7e
|
modules/dgn-access-control: Fix keys
|
2023-05-22 15:58:41 +02:00 |
|
Tom Hubrecht
|
24500ed369
|
modules: Init with access control
|
2023-05-22 15:07:03 +02:00 |
|