mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
tvl-depot/ops/modules
History
Vincent Ambo 8cdad7d45c feat(ops): introduce (head|tail)scale server at net.tvl.fyi 
This runs a headscale server on sanduny which lets users join their
machines to the TVL tailscale network.

This would theoretically let people communicate with each other on the
internal network, but also more notably joined servers can advertise
exit node capability so that we can have our own "VPN network", for
starters with endpoints in Germany, UK and Russia (whitby, sanduny and
koptevo respectively).

This setup isn't fully stable yet, notably:

* The IP range used by tailscale is just the default one right now,
  I'm not sure if that should be changed or what.

* The system is stateful (on sanduny), but the state is not (yet)
  backed up anywhere. Use with caution.

* Machine joining is a manual process requiring SSH & root access to
  sanduny.

  The process is to log in to sanduny, then get a headscale shell with
  `sudo -u headscale bash`, and to use the `headscale` CLI within
  there to administrate access.

  I've opted to create a user account `tvl` for TVL-owned machines,
  and a personal account for myself and my machines.

Change-Id: I4f1be1fe8062a6c2e77203ff72fe8709f4e4dec8
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8837
Reviewed-by: sterni <sternenseemann@systemli.org>
Reviewed-by: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
2023-06-22 13:23:14 +00:00
..
tvl-slapd chore(3p/sources): Bump channels & overlays 2022-08-13 14:43:05 +00:00
www fix(ops/www): allow all indexing on cl.tvl.fyi 2023-03-29 12:17:56 +00:00
.skip-subtree refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
atward.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
auto-deploy.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
automatic-gc.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
cgit.nix refactor(ops/cgit): make user configurable 2022-07-12 08:49:55 +00:00
clbot.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
default-imports.nix feat(ops/auto-deploy): Support auto-deploy 2021-12-26 14:55:42 +00:00
default.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
depot-inbox.nix chore(3p/sources): Bump channels & overlays 2023-06-15 17:09:02 +00:00
depot-replica.nix fix(depot-replica): make the depot replica world readable 2022-07-12 08:49:55 +00:00
gerrit-queue.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
irccat.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
josh.nix fix(views/kit): communicate :unsign in the tvl-kit URL directly 2023-03-31 08:46:01 +00:00
journaldriver.nix refactor(ops/modules): Move journaldriver configuration into module 2022-02-18 11:38:34 +00:00
known-hosts.nix fix(ops/modules): adapt for changed ssh.knownHosts 2022-05-26 10:05:54 +00:00
monorepo-gerrit.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
nixery.nix refactor(nixery): Modernise structure of binaries 2022-05-23 15:04:56 +00:00
oauth2_proxy.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
open_eid.nix feat(ops/modules/open_eid): add support for Web eID extension 2023-04-28 13:14:24 +00:00
owothia.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
panettone.nix fix(ops/modules): regularly restart panettone for b/225 2022-12-05 09:40:38 +00:00
paroxysm.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
prometheus-fail2ban-exporter.nix refactor(ops): Break out prometheus-fail2ban-exporter module 2021-06-12 15:51:49 +00:00
quassel.nix fix(ops/modules/quassel): use systemd LoadCredential to read certs 2023-06-15 21:34:36 +00:00
README.md refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00
restic.nix style: format entire depot with nixpkgs-fmt 2022-01-31 16:11:53 +00:00
smtprelay.nix feat(3p/agenix): update to 2022-05-16 and add to niv 2022-05-25 15:00:37 +00:00
sourcegraph.nix chore(ops/sourcegraph): Bump to 3.40.0 2022-05-28 11:58:34 +00:00
tvl-buildkite.nix chore(3p/sources): Bump channels & overlays 2022-09-28 08:02:31 +00:00
tvl-cache.nix fix: reflect renames of Nix configuration options 2022-08-25 16:34:39 +00:00
tvl-headscale.nix feat(ops): introduce (head|tail)scale server at net.tvl.fyi 2023-06-22 13:23:14 +00:00
tvl-users.nix chore(3p/sources): Bump channels & overlays 2023-04-07 09:20:33 +00:00
v4l2loopback.nix refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00

README.md

NixOS modules

This folder contains various NixOS modules shared by our NixOS configurations.

It is not read by readTree.