cst1/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity
903 commits 16 branches 0 tags 1.9 MiB
Commit graph

50 commits

Author SHA1 Message Date
catvayor
a60b546277
feat(vault01/gretap): gretap for hackaton 2024-12-07 10:52:37 +01:00
soyouzpanda
113c83bb9c
feat: laptop change and smartphone add to authorized MACs 2024-10-18 11:12:14 +02:00
catvayor
5b271b7b4a
feat(nat): enabling for dgnum members for tests 2024-10-10 00:00:56 +02:00
soyouzpanda
93c47f47be
fix: laptop change 2024-10-09 23:47:29 +02:00
Tom Hubrecht
6c4099d369 feat(infra): Internalize nix-lib, and make keys management simpler 2024-10-09 18:58:46 +02:00
Ryan Lahfa
595407c13b feat(ISP): enable SNAT on 5C:64:8E:F4:09:06 
For testing purposes.

Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-09-08 12:32:56 +02:00
catvayor
3b766e6a2b feat(ulogd): enabling ulogd 2024-09-08 12:21:08 +02:00
catvayor
b8601b0782 feat(nat): desactivating on vlan-apro 2024-09-07 16:09:01 +02:00
Tom Hubrecht
fd0aeacff4
feat(firewall): Sunset fail2ban and switch to reaction 2024-09-01 22:51:56 +02:00
Tom Hubrecht
8a42e18d98
feat(k-radius): Use LE certificates instead of self-signed ones 2024-09-01 15:40:59 +02:00
Ryan Lahfa
3ca3ff8939 feat(radius): add AP secret for RADIUS auth requests 
Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
 2024-08-31 22:38:35 +02:00
catvayor
411795c664
fix(routing): clean icmp storm 2024-07-08 20:38:01 +02:00
catvayor
dce439fcca
fix(shitty-oob): Drop user vlans when no-uplink 2024-07-08 20:38:00 +02:00
catvayor
37a18c0347
feat(nat): Enable nat (with ip_forward) 2024-07-08 20:38:00 +02:00
catvayor
bc5ee80d69 style: requested changes 2024-05-26 20:50:33 +02:00
catvayor
9f256186e0 feat(dhcp): drop freeRadius to use networkd 2024-05-23 14:58:37 +02:00
catvayor
e9c5489bc2 feat(dhcp): dhcp configuration 
limit to 300 vlans because of freeRadius limitation
 2024-05-23 10:39:24 +02:00
catvayor
f9250e8886 feat(k-radius): Allow to enable extra mods and sites 2024-05-23 10:39:24 +02:00
catvayor
8c14c5d2c6 refactor(vlans): list vlans and their parameters in a separate file 2024-05-23 10:39:24 +02:00
catvayor
f22580dd26 fix(vlans): activate things to bypass vlan limit 2024-05-23 10:39:24 +02:00
catvayor
35ab7bfee3 feat(dhcp): Add DHCP on vlans 
Uses networkd, maybe it's better to do it with radius, but it's simpler
 2024-05-23 10:39:24 +02:00
catvayor
150e741263 feat(routing): Chaque vlan a une IP différente et policyrules 2024-05-23 10:39:24 +02:00
catvayor
93bf6f8baa feat: refactor du plan IP 2024-05-23 10:39:24 +02:00
Tom Hubrecht
2c88c2bad7 fix(netbox-agent): batch requests filtering on interfaces 
Re-enable the service on vault01 now that it works
 2024-05-07 13:29:43 +02:00
sinavir
3494f609bb fix(netbox-agent): really disable on vault01 2024-05-07 09:07:22 +02:00
sinavir
bf4bdf70df fix(netbox-agent): disable on vault01 2024-05-07 08:45:19 +02:00
Tom Hubrecht
dd10a8e2fe feat(ups): Use netbirdIp as given in the metadata 2024-04-23 13:47:21 +02:00
sinavir
d5d21ec204 fix(prometheus-nut-exporter): make it work 2024-04-22 08:28:40 +02:00
catvayor
1eea46b59f style: requested change 2024-04-21 23:14:53 +02:00
catvayor
4d16839a10 feat(upsmon): Send mails to isp team 2024-04-21 23:14:53 +02:00
catvayor
ee81052766 fix(ups): Password is a secret 2024-04-21 23:14:53 +02:00
catvayor
b8d3b34122 feat(upsmon): Auto-shutdown when on batterie for too long 2024-04-21 23:14:53 +02:00
catvayor
9ec9821556 feat(ups): nut_exporter and scraping 2024-04-21 23:14:53 +02:00
catvayor
f9de205aad feat(upsd): Enabling upsd 2024-04-21 23:14:53 +02:00
catvayor
01c2505491 feat(vault01): Add user vlans 
Only the first 300 vlans are activated, 850 make it crash
 2024-04-16 09:40:47 +02:00
Tom Hubrecht
93b7a242ab feat(vault01/networking): Simplify the configuration 2024-04-14 14:49:22 +02:00
Tom Hubrecht
9eb89a03ab fix(radius): Don't lose our shit when copying files 2024-04-08 23:10:59 +02:00
Tom Hubrecht
e2cb4a7dca feat(k-radius): Update packages 2024-04-08 22:42:59 +02:00
Tom Hubrecht
ccfbc4be42 feat(radius): Move configuration from compute01 to vaul01 2024-04-08 22:21:17 +02:00
catvayor
e8fde45fbf feat(apro): Add vlan apro for AP flashing 2024-04-08 16:01:29 +02:00
Tom Hubrecht
d23d53d5fc feat(vault01): Disable bcachefs 2024-04-07 21:29:18 +02:00
catvayor
beba4fb0f6 feat(mgmt): Add APs vlan access 2024-04-07 20:20:04 +02:00
catvayor
026653218f feat(mgmt): Use IPv6 instead of IPv4 2024-04-07 20:20:04 +02:00
catvayor
2e3bb99b84 feat(vault01): Add admin vlan 2024-04-06 00:02:47 +02:00
sinavir
ce05bee635 feat(vault01): CRI uplink is now connected to internet 2024-03-27 15:38:46 +01:00
sinavir
3cce216ada feat(vault01): Add CRI link 2024-03-27 10:26:31 +01:00
Tom Hubrecht
54ec4a6b18 feat(dgn-hardware): Factorize bcachefs setup 2024-02-20 21:25:04 +01:00
Tom Hubrecht
5e3819c9b2 feat(shell): Add pre-commit hooks and reformat the repo 2024-02-02 10:51:31 +01:00
Tom Hubrecht
345bdd4d44 feat(dgn-hardware): Allow bcachefs configuration 2024-01-11 12:58:27 +01:00
Tom Hubrecht
13524c20f6 feat(machines): Init vault01 2024-01-10 15:00:18 +01:00