tvl-depot/users/tazjin/nixos
Vincent Ambo 8cdad7d45c feat(ops): introduce (head|tail)scale server at net.tvl.fyi
This runs a headscale server on sanduny which lets users join their
machines to the TVL tailscale network.

This would theoretically let people communicate with each other on the
internal network, but also more notably joined servers can advertise
exit node capability so that we can have our own "VPN network", for
starters with endpoints in Germany, UK and Russia (whitby, sanduny and
koptevo respectively).

This setup isn't fully stable yet, notably:

* The IP range used by tailscale is just the default one right now,
  I'm not sure if that should be changed or what.

* The system is stateful (on sanduny), but the state is not (yet)
  backed up anywhere. Use with caution.

* Machine joining is a manual process requiring SSH & root access to
  sanduny.

  The process is to log in to sanduny, then get a headscale shell with
  `sudo -u headscale bash`, and to use the `headscale` CLI within
  there to administrate access.

  I've opted to create a user account `tvl` for TVL-owned machines,
  and a personal account for myself and my machines.

Change-Id: I4f1be1fe8062a6c2e77203ff72fe8709f4e4dec8
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8837
Reviewed-by: sterni <sternenseemann@systemli.org>
Reviewed-by: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
2023-06-22 13:23:14 +00:00
..
camden chore: address renames of boot & tmp related options 2023-05-11 10:10:58 +00:00
frog chore: address renames of boot & tmp related options 2023-05-11 10:10:58 +00:00
koptevo feat(ops): introduce (head|tail)scale server at net.tvl.fyi 2023-06-22 13:23:14 +00:00
modules feat(tazjin/koptevo): deploy tgsa 2023-06-18 12:43:15 +00:00
tverskoy fix(tazjin/nixos): fix 32-bit support for games 2023-06-14 10:06:37 +00:00
zamalek refactor(tazjin/nixos): zerotier out, tailscale in (again) 2023-04-17 09:32:55 +00:00
.gitignore feat(tazjin/tverskoy): Support local configuration 2022-03-31 13:24:27 +00:00
default.nix chore(tazjin/polyanka): goodbye 2023-06-20 12:25:49 +00:00
README.md refactor(ops): Split //ops/nixos into different locations 2021-04-11 22:18:22 +00:00

NixOS configuration

My NixOS configurations! It configures most of the packages I require on my systems, sets up Emacs the way I need and does a bunch of other interesting things.

System configuration lives in folders, and some of the modules stem from //ops/modules.

Machines are deployed with the script at ops.nixos.rebuild-system.

Configured hosts:

  • tverskoy - X13 AMD that's travelling around with me
  • frog - weapon of mass computation (in storage in London)
  • camden - NUC formerly serving tazj.in (in storage in London)