89 commits

Author	SHA1	Message	Date
Tom Hubrecht	df8831301f	feat(storage01): Switch to nix-modules for forgejo nix runners	2024-01-10 13:59:11 +01:00
Tom Hubrecht	4716f8a398	feat(modules): Replace dgn-secrets by age-secrets	2024-01-09 14:48:33 +01:00
Tom Hubrecht	7249301a33	fix(network): Use correct ipv6 addresses	2024-01-08 17:18:55 +01:00
Tom Hubrecht	c5e15987ed	feat(modules/dgn-console): Add an activation script showing system diffs	2024-01-07 18:17:14 +01:00
Tom Hubrecht	03d4fd3982	feat(fail2ban): Add preauth jail and enable on storage01	2024-01-05 16:10:06 +01:00
Tom Hubrecht	9b49bd2721	feat(dgn-runners): Add curl and link usr/bin/env to bin/env for compatibility with nixos	2023-12-22 18:23:48 +01:00
Tom Hubrecht	011e52083b	feat(dgn-runners): Install openssh	2023-12-15 23:39:49 +01:00
Tom Hubrecht	34e3953418	fix(dgn-runners): Set NIX_PATH to current version	2023-12-15 20:45:54 +01:00
Tom Hubrecht	8cef4a594a	feat(dgn-runners): Init module for runners with a store	2023-12-15 20:10:09 +01:00
Tom Hubrecht	45edfee048	feat(hardware): Add kernelParams for all machines so that virtualisation is possible	2023-12-11 01:05:05 +01:00
Tom Hubrecht	b338eeed6a	fix(network): Add dns servers on the main interface	2023-12-04 12:36:34 +01:00
Tom Hubrecht	18b6b0f605	feat(modules/dgn-harware): Refactor hardware config	2023-11-29 16:11:35 +01:00
Tom Hubrecht	7e5920fd16	feat(modules/dgn-console): Add a pg upgrade script when necessary	2023-11-29 14:58:05 +01:00
Tom Hubrecht	fa799c9dda	feat(modules): Deploy fail2ban	2023-11-28 20:51:23 +01:00
Tom Hubrecht	2ffae107e6	fix(dgn-network): Don't log refused connections	2023-11-13 14:21:52 +01:00
sinavir	c30d8961b9	fix(vm builds): Add vmvariant to have working dns in vm	2023-10-27 14:36:19 +02:00
Tom Hubrecht	a4ad7810ae	fix(nsncd): Update source	2023-10-26 14:18:36 +02:00
Tom Hubrecht	86129fb971	feat(nix-lib): Rename dgn-lib to lib.extra	2023-10-04 09:23:48 +02:00
Tom Hubrecht	5622bc3748	feat(dgn-secrets): Add a matches option ... This option allows specifying regexes tied to options. When a secret matches a pattern, the the options are applied to it.	2023-10-02 22:48:18 +02:00
Tom Hubrecht	958afe957f	feat(modules): Init dgn-web ... Add a module to enable recommended web settings	2023-10-01 23:08:54 +02:00
Tom Hubrecht	ef9f84430e	feat(storage01): Deploy atticd on cachix.dgnum.eu	2023-09-28 17:20:16 +02:00
Tom Hubrecht	c6121e63d7	modules/dgn-secrets: Fix options	2023-07-24 09:50:33 +02:00
Tom Hubrecht	c2616ce4f5	modules/dgn-dns: init ... Also deploy a DNS server on compute01	2023-07-21 00:37:05 +02:00
Tom Hubrecht	fef1e90386	modules/dgn-console: Update hostname display	2023-07-20 15:48:24 +02:00
Tom Hubrecht	2274668f9b	modules: Setup dgn-network with configuration from metadata	2023-07-20 12:32:31 +02:00
Tom Hubrecht	58e269d7f2	modules: Fix typos	2023-07-18 17:07:14 +02:00
Tom Hubrecht	c111662a9e	modules/dgn-hardware: Set default configurations	2023-07-18 17:03:01 +02:00
Tom Hubrecht	935d4a5ee5	modules: Use inherit instead of with	2023-07-18 17:00:51 +02:00
Tom Hubrecht	5b4cf12ed7	machines: Add compute01 and storage01	2023-07-18 17:00:31 +02:00
Tom Hubrecht	5a0e196658	modules/dgn-access-control: Add license	2023-06-30 18:39:38 +02:00
Tom Hubrecht	6003afb8b8	modules: Add new modules and agenix	2023-06-30 18:39:20 +02:00
Tom Hubrecht	4b610d0b80	modules/dgn-ssh: Update settings	2023-06-30 18:38:23 +02:00
Tom Hubrecht	9e18e8e078	modules/dgn-secrets: Init ... Add a way to simplify secrets imports	2023-06-30 18:38:10 +02:00
Tom Hubrecht	94305d2723	modules/dgn-acme: Init	2023-06-30 18:37:44 +02:00
sinavir	5bc379c1d1	document access control	2023-05-22 21:23:33 +02:00
Tom Hubrecht	a7ce39a2f5	modules/dgn-ssh: Add default ssh configuration for all nodes	2023-05-22 15:21:25 +00:00
Tom Hubrecht	8a65ff477d	modules/dgn-access-control: Use getAllKeys instead of getKeyFiles	2023-05-22 16:28:18 +02:00
Tom Hubrecht	be29da5e7e	modules/dgn-access-control: Fix keys	2023-05-22 15:58:41 +02:00
Tom Hubrecht	24500ed369	modules: Init with access control	2023-05-22 15:07:03 +02:00