Commit Graph

385 Commits

Author SHA1 Message Date
be901d4222 nixos/kelder: Independent nginx config 2023-05-27 18:44:23 +01:00
75fc5ae163 nixos: Add actual IP / CIDR calculation 2023-05-27 16:57:28 +01:00
1fa718c20a nixos/kelder: Add acquisition 2023-05-23 21:32:38 +01:00
18ad20a8c5 Update inputs 2023-05-14 18:11:57 +01:00
4d74f43d74 nixos/kelder: Improve boot and mounting 2023-05-14 16:33:06 +01:00
214e4f2354 nixos: Implement estuary -> kelder tunnel 2023-05-14 01:12:42 +01:00
875cd4e27d nixos/kelder: Add amogus 2023-05-13 23:45:56 +01:00
ff01a2aa36 Initial Kontent Kelder 2023-05-13 22:19:45 +01:00
c6c6ee4d72 nixos/castle: Add boardie 2023-04-23 23:44:55 +01:00
28d3a9b83f nixos/castle: Fix pipewire config for jacktrip 2023-04-23 23:08:42 +01:00
5f0db06d99 nixos/castle: Enable AMD pstate driver 2023-04-23 20:22:53 +01:00
e2ed11e1c2 nixos/castle: Add possibly needed amdgpu patch 2023-04-23 20:22:31 +01:00
c0b87a7d4a nixos/castle: Add correct display layout 2023-04-23 19:54:31 +01:00
1e6209e540 nixos/castle: Initial config 2023-04-23 19:13:54 +01:00
e8e6a369cd nixos/tower: Update to kernel 6.2 2023-04-23 12:47:20 +01:00
d427de57fe nixos/firewall: DNAT by IP instead of incoming interface 2023-04-21 15:44:30 +01:00
4d8935ffd6 nixos/estuary: Add Apple peering 2023-04-21 15:14:11 +01:00
7085e9e5ba Update all inputs 2023-04-15 21:17:27 +01:00
438f2c835d nixos/colony: Switch to proper backup LV 2023-02-22 01:26:19 +00:00
c8385a466e nixos/colony: Make fstrim happen right before backup 2023-02-21 14:37:39 +00:00
15721e0894 nixos/shill: Re-enable Jackflix 2023-02-21 14:22:10 +00:00
207697c3b2 nixos: Add borgthin module 2023-02-20 01:43:48 +00:00
c546331129 nixos/{object,toot}: Ensure postgres is accessible on service start 2023-02-19 17:39:15 +00:00
eceb1ba892 nixos/object: Migrate to SNSD deployment 2023-02-19 16:49:07 +00:00
f17ed65cb8 nixos/colony: Move to new thin pool for NVMe 2023-02-19 16:47:13 +00:00
4b124d216b nixos/tower: Add Steam 2023-02-13 19:43:50 +00:00
dbeee68bdf home-manager/gui: Use first party Spotify client for now 2023-02-13 19:41:21 +00:00
e8e90e6172 nixos/tower: Enable bolt Thunderbolt daemon 2023-02-11 15:28:50 +00:00
0c797a81e0 nixos/estuary: Update home IP 2023-02-01 17:13:44 +00:00
3021405868 nixos/estuary: Add new peerings and upstream 2023-02-01 17:13:27 +00:00
f84f97dc06 nixos/tower: Fix networkd wait-online 2023-02-01 13:12:06 +00:00
250bd96f08 nixos/tower: Update to kernel 6.1 2023-02-01 13:11:49 +00:00
3c25260e79 nixos/middleman: Fix Matrix cross-origin shite 2023-01-13 14:08:09 +00:00
6fe897fd3c nixos/colony: Use temporary LVs until SSD is replaced 2023-01-11 20:06:09 +00:00
304152dbb2 Upgrade NixOS stable to 22.11 and upgrade packages 2023-01-08 17:32:10 +00:00
61b87e3471 nixos/whale2/valheim: Update and disable idle backups 2023-01-08 15:30:40 +00:00
6f24632866 nixos/estuary: Add more Cloudflare peering 2023-01-07 15:20:30 +00:00
e6d92eb56b nixos/estuary: Fix ixps nftables config (smh my head) 2023-01-05 14:58:02 +00:00
d85b226707 nixos/whale2: Add whitelist for Valheim 2022-11-28 22:42:27 +00:00
2ba4f88264 nixos/whale2: Update Valheim Docker image 2022-11-26 15:48:30 +00:00
92ef1db3de nixos/estuary: Add direct peering with jurrian 2022-11-23 20:14:28 +00:00
f9ed1d49a2 nixos: Add extra VIPs from ColoClue 2022-11-21 12:16:32 +00:00
48566d2ef9 nixos/estuary: Always SNAT to ColoClue IPv4 2022-11-20 18:42:08 +00:00
d01078dc7b nixos: Add Sharry file sharing service 2022-11-20 18:41:49 +00:00
0038d9c987 Update nixpkgs and home-manager 2022-11-20 04:44:22 +00:00
c42e836d52 nixos/shill: Add Mastodon 2022-11-20 02:43:48 +00:00
d31ec042c4 nixos/estuary: Use routable IPs for DNS queries 2022-11-19 20:31:26 +00:00
80b102581b nixos/estuary: Reduce preference of NL-ix routes slightly 2022-11-19 18:10:47 +00:00
7c523633f4 nixos/estuary: Update networking config for iFog and new IXPs 2022-11-18 11:54:37 +00:00
950bcb3055 nixos/middleman: Fix broken Element Web file downloads 2022-11-18 11:54:37 +00:00
1a847cc121 nixos/estuary: Add Hurricane Electric and LUJE.net over Frys-IX 2022-11-01 13:00:04 +00:00
e2f541ebe2 nixos/estuary: Tweak BGP templates 2022-10-26 22:51:21 +01:00
2805167c67 nixos/estuary: Add config for Frys-IX 2022-10-25 00:14:35 +01:00
bcde359853 nixos/estuary: Disable LLMNR and mDNS 2022-10-20 18:02:27 +01:00
d64f750761 nixos/estuary: Increase NIC TX / RX buffer sizes 2022-10-20 16:54:03 +01:00
02395acaf1 nixos/estuary: Announce and route internal / home prefixes 2022-10-16 19:07:41 +01:00
2a99bc032c nixos/estuary: Add peering with LUJE.net labs 2022-10-16 18:07:58 +01:00
7df91a6243 nixos/estuary: Fix missing routes from own AS 2022-10-11 01:06:33 +01:00
97de7f4f49 nixos/jackflix: Use Amsterdam VPN 2022-10-09 15:46:45 +01:00
4953a68e8b nixos/estuary: Add bgp.tools monitoring session 2022-10-09 15:02:17 +01:00
8300e49b00 nixos/estuary: Fix BIRD2 startup / route export to kernel 2022-10-08 21:13:16 +01:00
401401f6bc nixos/estuary: Add BGP4 and export routes to kernel 2022-10-08 20:20:10 +01:00
176e603f19 nixos/colony: Fix estuary waiting for ConnectX-2 2022-10-07 20:26:23 +01:00
fcc99a92e9 nixos/estuary: Add initial BIRD2 config 2022-10-06 22:12:30 +01:00
e8d6a702e6 nixos/colony: Initial (attempt at) switch to ColoClue 2022-10-06 19:03:29 +01:00
89e39ca2e2 nixos/tower: Kernel fix to 5.19.14 and power improvements 2022-10-06 11:57:12 +01:00
4fda577040 nixos/middleman: Add default nginx pages 2022-10-03 22:39:35 +01:00
b0054f36d5 nixos/tower: Disable DNSSEC 2022-09-09 17:42:12 +01:00
4b4eaa8dcc nixos/tower: Set bootloader timeout to 10 seconds 2022-09-09 17:39:59 +01:00
5203b9ad98 nixos/tower: Enable doas fingerprint auth 2022-09-09 14:25:39 +01:00
09ddeecf4f nixos/tower: Enable TLP 2022-09-09 14:16:05 +01:00
37b0526524 nixos/tower: Enable bluez 2022-09-09 14:11:34 +01:00
5157ca2541 Further configs for tower 2022-09-09 01:04:25 +01:00
64847d5e8e Add initial config for tower 2022-09-08 20:31:44 +01:00
3b55a1fa67 nixos/whale2/valheim: Fix volume names 2022-08-01 23:07:24 +01:00
ca8ad4c043 nixos/whale2: Add Valheim server 😳 2022-08-01 22:55:59 +01:00
9750bc5052 Add OCI container VM 2022-08-01 17:50:52 +01:00
def3d440d0 nixos/chatterbox: Add Heisenbridge 2022-07-22 00:45:25 +01:00
eef2b0bf8d nixos/shill: Implement basic GC for Nix cache 2022-07-17 02:58:59 +01:00
b2e06a626c nixos/estuary: bandwidth.py tab to space 2022-07-17 02:31:14 +01:00
dfe714b964 nixos/shill: Don't use own cache 2022-07-16 21:33:07 +01:00
963eeee391 nixos/estuary: Override nix-cache.nul.ie to not hairpin via Cloudflare 2022-07-16 21:32:46 +01:00
0ca615a389 nixos: Add Hercules CI and Nix cache 2022-07-16 21:03:52 +01:00
accb14721d nixos/shill: Add MinIO container 2022-07-16 15:01:15 +01:00
408177adb3 nixos/estuary: Implement 95% bandwidth limiter 2022-07-10 23:27:57 +01:00
e240b9a54e nixos/estuary: Implement bandwidth limiting 2022-07-10 19:12:16 +01:00
ee7b79c686 nixos/shill: Remove some network sysctls 2022-07-10 18:16:51 +01:00
17b0f9e3de nixos/chatterbox: Production config 2022-07-10 18:16:35 +01:00
f6c5a726de nixos/estuary: Use ndisc6 instead of ping for keepalive thing 2022-07-10 16:18:20 +01:00
c68a48eb34 nixos/middleman: Switch Sonarr, Radarr, Jackett and torrents to prod 2022-07-10 13:07:02 +01:00
5795a04634 nixos/middleman: Switch jackflix away from test 2022-07-08 21:40:59 +01:00
d12fc982f6 nixos/estuary: Add ping service to keep router happy for IPv6 2022-07-07 23:49:22 +01:00
31561867f5 nixos/jackflix: Add speed limits for Transmission 2022-07-07 23:05:39 +01:00
b6f9403d11 nixos/estuary: Set up HE DNS for slave of reverse IPv6 2022-07-07 15:25:52 +01:00
4bf1fba7c5 nixos/estuary: Make authoritative for whole IPv6 prefix 2022-07-07 15:01:14 +01:00
f71ead2bde nixos/estuary: Disable link-local addressing on WAN 2022-07-06 20:51:51 +01:00
414fa50b30 nixos/colony: Fix wan dependencies for estuary 2022-07-01 02:30:29 +01:00
2e63a56dd4 nixos/chatterbox: Disable Matrix server for now 2022-07-01 01:38:20 +01:00
2effd928d7 nixos/estuary: Fix pdns forward-zones 2022-07-01 01:15:45 +01:00
4fd6330274 nixos: Production network configuration 2022-07-01 01:07:38 +01:00
a92358f28b nixos: Add VM TAP FD, use real WAN (via macvtap) and fix deps 2022-06-30 23:16:02 +01:00
0310da9227 nixos/vms: Add more parameters for PCIe passthrough 2022-06-30 00:50:50 +01:00
9a9e58bc1a nixos/colony-psql: Real hardware config 2022-06-19 17:55:09 +01:00
ca191f5c67 nixos/colony: Ignore IPMI VCCM alert 2022-06-19 14:07:27 +01:00
47a34b6dec nixos/colony: Fix hyperthreading in VMs 2022-06-19 13:11:20 +01:00
75ce0a5ba9 nixos/jackflix: Real hardware config 2022-06-19 01:23:18 +01:00
e194f5c6e6 nixos/estuary: Don't bother giving secrets new names 2022-06-18 23:25:00 +01:00
661233344c nixos/vaultwarden: Real hardware config 2022-06-18 23:22:44 +01:00
45ffefc328 nixos/colony: Log smartd data for Netdata 2022-06-18 03:38:04 +01:00
803db12e31 nixos/middleman: Real hardware config 2022-06-18 03:28:09 +01:00
128accbade nixos/vms: Make drives a list (for ordering) 2022-06-18 03:06:01 +01:00
6971048268 nixos/shill: Real hardware config 2022-06-18 02:56:05 +01:00
49e80e0ce0 nixos/estuary: Re-organise secrets 2022-06-18 02:26:27 +01:00
8c57e77382 nixos/estuary: Add iperf3 2022-06-18 02:13:54 +01:00
6512669071 nixos/colony: Extra hardware bits 2022-06-18 02:13:37 +01:00
c8e5859eb5 nixos/colony: Add AMD microcode 2022-06-17 22:26:51 +01:00
f2e5707c6a nixos/estuary: Real hardware config 2022-06-17 01:50:10 +01:00
36d81cb656 nixos/colony: Configure for real hardware 2022-06-17 00:54:28 +01:00
45b9c8b74b nixos/colony-psql: Add Netdata 2022-06-13 02:14:18 +01:00
6958e86c94 nixos/chatterbox: Add Netdata 2022-06-13 01:12:01 +01:00
8b807caf5a nixos/installer: Customise ISO a bit 2022-06-12 23:20:56 +01:00
e846c4404e nixos/estuary: Add PowerDNS recursor Netdata monitoring 2022-06-12 19:37:52 +01:00
e0f9d50713 nixos/estuary: Add PowerDNS auth Netdata monitoring 2022-06-12 18:57:00 +01:00
6ae99062fd nixos/middleman: Add nginx netdata monitoring 2022-06-12 18:23:35 +01:00
f38c5872a4 nixos: Improve inner firewalls 2022-06-12 17:33:33 +01:00
c0ca7888aa nixos: Add Netdata 2022-06-12 17:27:11 +01:00
f99eb399dc nixos/jackflix: Add Sonarr 2022-06-12 15:17:35 +01:00
e52518259c nixos/jackflix: Add Jellyfin 2022-06-12 14:56:44 +01:00
7e5c051bfc nixos/jackflix: Improve firewall 2022-06-12 14:03:44 +01:00
46c9aa655a nixos/jackflix: Bind Jackett and Transmission to vpn 2022-06-12 13:00:24 +01:00
3be78c45f6 nixos/jackflix: Make gid for media fixed 2022-06-12 13:00:03 +01:00
f9206d68d0 nixos/jackflix: Add Transmission 2022-06-12 02:40:57 +01:00
87fbd63c46 nixos/jackflix: Add Jackett and Radarr 2022-06-12 01:40:57 +01:00
26d2608a66 nixos/middleman: Add simple auth 2022-06-12 01:00:26 +01:00
0b8b6fccc8 nixos/middleman: Add nginx-sso 2022-06-12 00:31:08 +01:00
7dc6b5df8c nixos: Initial jackflix container 2022-06-11 19:13:20 +01:00
502b96996a nixos/colony: Increase shill resources 2022-06-11 16:42:00 +01:00
106698b53e nixos/middleman: Working Matrix 2022-06-11 01:20:32 +01:00
3085df1710 nixos: Initial Synapse 2022-06-10 23:25:55 +01:00
3edb54fef6 nixos/deploy-rs: Show container unit log while deploying 2022-06-10 22:14:42 +01:00
30c8913c08 nixos/estuary: Generate DNS records for non-default interfaces 2022-06-10 20:42:13 +01:00
68f6942bda nixos/estuary: Fix IPv6 PTR generated records 2022-06-07 14:04:41 +01:00
646b582984 nixos/shill: Add postgres container 2022-06-06 17:52:36 +01:00
3ec00b60f5 nixos/middleman: Add element-web 2022-06-06 17:10:53 +01:00
da22c4d12f nixos/middleman: Split vhosts into separate file 2022-06-06 16:17:33 +01:00
4c2019299c nixos: Disk layout cleanup 2022-06-06 15:53:57 +01:00
57f3bbe794 nixos/pdns: Move file records into module 2022-06-06 14:11:52 +01:00
daa4ed45f5 nixos/estuary: Fix pdns-file-records clobbering .dat ownership 2022-06-06 13:48:03 +01:00
77eaaf52c7 nixos: Remove containers from global deploy list 2022-06-06 13:25:05 +01:00
d2826ec1f4 nixos/middleman: Add config for Vaultwarden 2022-06-06 01:38:26 +01:00
ffeb333bbc nixos/middleman: Let's Encrypt for main domain 2022-06-06 01:17:19 +01:00
60b2b6ec80 nixos/middleman: Working HTTPS 2022-06-06 00:57:11 +01:00
7da7458a34 nixos: Working ACME certs 2022-06-06 00:19:31 +01:00
b472f4fe2e nixos/estuary: Add Lua file-based DNS records 2022-06-06 00:19:31 +01:00
42a3ce22af nixos/middleman: Improve basic nginx configuration 2022-06-06 00:19:23 +01:00
276ccc8015 nixos/estuary: Update IP address 2022-06-05 16:41:57 +01:00
4e36748154 nixos: Add domain to assignments 2022-06-05 16:40:44 +01:00
fd4fcdc2a4 nixos: Add wildcard reverse DNS 2022-06-05 16:21:24 +01:00
575561a330 nixos: Avoid hardcoding any IP prefixes 2022-05-31 21:58:29 +01:00
11dbc01ba0 Add initial nginx container 2022-05-31 21:25:51 +01:00
62c00b8b22 nixos/estuary: Make public IP be internal assignment 2022-05-29 15:48:26 +01:00
baed6f24f6 nixos: Improve VM networking 2022-05-29 15:22:49 +01:00
00493bf30f nixos: Add working container VM (w/ vaultwarden)
Also improve IPv6 addressing / routing
2022-05-29 03:30:40 +01:00
38e8827487 nixos: Move colony VMs into subdirectory 2022-05-28 23:10:29 +01:00
e6e4a1d38e nixos: Test setup with public networking 2022-05-28 22:59:50 +01:00
4660406120 nixos/user: Load password from secret 2022-05-28 19:02:13 +01:00
c841b37f19 Move NixOS and home-manager stable to 22.05 2022-05-28 18:38:03 +01:00
64def7f564 nixos: Tweak networking and prepare for more VMs 2022-05-28 15:34:50 +01:00
1789d11927 nixos: Add auth DNS module (and serving from estuary) 2022-05-22 23:24:57 +01:00
b504f11c6b nixos: Internal network tidying 2022-05-18 23:29:52 +01:00
0a5a554ab3 nixos: Attempt to get LLDP working 2022-05-18 22:52:42 +01:00
89928a8fee nixos/colony: Hopefully fix estuary attempting to start early 2022-05-18 20:57:26 +01:00
498888aad0 nixos: Reworked network assignments 2022-05-17 23:27:14 +01:00
009dec03cf Initial networking VM
Also general improvements around VMs
2022-05-16 00:05:02 +01:00
5563d1be46 nixos/vms: Add UUID and MAC address options 2022-05-12 21:20:37 +01:00
a907ae428f nixos/vms: Add disk support 2022-05-07 17:27:12 +01:00
39f8e65f74 nixos: Add initial QEMU-based VM module 2022-05-02 20:40:33 +01:00
5290c78b06 nixos/modules/containers: Remove host bridge config 2022-05-02 20:40:33 +01:00
19dcdcfa30 Initial custom systemd-nspawn based containers rewrite 2022-04-04 18:18:01 +01:00
67114c1336 Implement initial containers module 2022-03-26 14:20:54 +00:00
8c61cea30d Add secret support 2022-02-22 00:59:57 +00:00
132e5c239c nixos/boxes/colony: Disable DHCP in dev VM 2022-02-21 00:37:09 +00:00
26ab49d91c Modularise NixOS and home-manager configs 2022-02-20 15:59:07 +00:00
7537cf4205 Functioning installation 2022-02-19 22:55:53 +00:00
c0414cd062 Add initial installer 2022-02-17 15:47:24 +00:00