Commit Graph

479 Commits

Author SHA1 Message Date
56704821b8 nixos/palace: Enable AER
Some checks failed
CI / Check, build and cache Nix flake (push) Failing after 1m2s
2023-12-09 15:22:49 +00:00
ca3547b27a nixos/user: Use impermanence's users options 2023-12-09 15:22:15 +00:00
88b6e00f93 nixos: Add Gitea VM 2023-12-09 15:22:01 +00:00
b4d0d9aff9 nixos/castle: Add libvirt
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m33s
Installer ISO / Build installer ISO (push) Successful in 3m11s
2023-12-05 23:27:16 +00:00
4ee66cdca7 nixos/build: Disable systemd initrd in ISO
Some checks reported warnings
CI / Check, build and cache Nix flake (push) Has been cancelled
2023-12-05 23:26:51 +00:00
373fb45831 nixos: Switch to systemd initrd
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m17s
2023-12-04 23:00:25 +00:00
c4e6896a0c nixos: Add initial palace
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 16m35s
2023-12-03 22:58:28 +00:00
a1778e0f1e Upgrade nixpkgs and NixOS stable to 23.11
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 26m58s
2023-12-03 15:06:11 +00:00
0cc35547f2 nixos: Working l2mesh with IPsec
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m15s
2023-11-26 01:29:44 +00:00
7404779c6d nixos/home/routing-common: Add initial VRRP 2023-11-25 17:18:34 +00:00
63f36fabbb nixos/home/routing-common: Set up CAKE qdisc for wan
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m0s
2023-11-25 16:28:43 +00:00
c8b65092be nixos/home/routing-common: Dynamically return WAN IP DNS
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m8s
2023-11-25 15:07:58 +00:00
d347234e82 nixos/home/routing-common: Move mstpd config to separate file
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m10s
2023-11-21 11:18:17 +00:00
0e115544e4 nixos/home/routing-common: Put lan-core on a 1500 byte MACVLAN
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 17m13s
2023-11-21 09:54:09 +00:00
e6ad150865 nixos/home/routing: Initial working RSTP
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 15m33s
2023-11-20 01:51:46 +00:00
afe124a726 nixos/stream: Remove public IPv4
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 15m21s
2023-11-19 23:50:24 +00:00
655a44a28b nixos/stream: Initial working config
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 15m5s
2023-11-19 22:05:24 +00:00
7330b8f832 nixos/home/routing-common: Add starting DNS server
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m21s
2023-11-19 14:32:23 +00:00
aa18ebcb3b nixos/oxbow: Rename to stream 2023-11-19 13:47:23 +00:00
23db7e6c66 Initial oxbow setup
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m56s
2023-11-19 00:27:29 +00:00
dfca7fccaa CI: Use pre-installed jq
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m1s
2023-11-18 15:59:48 +00:00
edb5767770 Add binary cache timeout and fallback
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m19s
2023-11-18 00:10:05 +00:00
38e7251300 Set up homes and systems to use cache
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m11s
2023-11-17 23:08:28 +00:00
5766bdda99 nixos/object: Use local storage instead of s3
All checks were successful
CI / Check, build and cache Nix flake (push) Successful in 14m46s
2023-11-17 22:14:19 +00:00
82eab34f4b nixos/estuary: Fix hairpinned NAT 2023-11-17 20:25:43 +00:00
241abd02ac Full CI 2023-11-17 20:25:33 +00:00
36cd77c697 nixos/object: Initial working atticd cache 2023-11-17 15:05:12 +00:00
f72713410a nixos/gitea: Maybe working CI setup
All checks were successful
CI / Check Nix flake (push) Successful in 21m49s
2023-11-17 02:36:32 +00:00
f13f990e5b Add initial Gitea CI
Some checks failed
CI / Check Nix flake (push) Failing after 20s
2023-11-16 22:03:02 +00:00
aa15afa650 nixos/kelder-spoder: Remove deprecated Nextcloud option 2023-11-16 21:42:55 +00:00
f202f8c12c Update nixosConfigurations to reference a preferred default config 2023-11-16 21:42:30 +00:00
3ae6725f0e nixos/whale2: Move actions cache to a separate disk 2023-11-16 19:39:53 +00:00
5ddcf927e3 nixos/gitea: Enable MinIO storage 2023-11-16 14:30:20 +00:00
cc00c7d20b nixos/chatterbox: Add mail config 2023-11-16 13:28:32 +00:00
9d30d76b18 nixos/colony: Add media disk to darts VM 2023-11-13 22:00:02 +00:00
ddc2ed2919 nixos/jackflix: Add Jellyseerr 2023-11-13 20:49:59 +00:00
fe4a24ab17 nixos/colony: Add Gitea LV to borgthin 2023-11-13 18:33:26 +00:00
d5a32419eb Add attic 2023-11-13 14:45:13 +01:00
f8c7183594 nixos/gitea: Set up Gitea Actions 2023-11-13 14:24:08 +01:00
17324455de nixos/shill: Add Gitea incoming mail support 2023-11-13 13:19:44 +01:00
a94c778e10 nixos/shill: Add Gitea 2023-11-13 08:14:16 +00:00
4f8bdc1219 nixos/tmproot: Persist rasdaemon DB 2023-11-12 19:35:41 +01:00
02eb96fe46 nixos/colony: Backup LVM metadata 2023-11-12 19:30:06 +01:00
14f1f5b575 nixos/colony: Add darts VM 2023-11-11 15:56:27 +00:00
9df8a450e8 nixos/colony: Enable rasdaemon 2023-11-11 14:09:45 +00:00
7b9045586f nixos/chatterbox: Add Matrix sliding sync proxy
Also fix nginx upstream definitions
2023-11-07 19:20:27 +00:00
3f01baae38 nixos/jackflix: Fix transmission not starting 2023-11-03 12:58:55 +00:00
2dbc8b398b Split constants into separate lib file 2023-11-02 13:41:50 +00:00
0659809c22 nixos/estuary: Extract record gen utils to separate lib 2023-11-01 20:46:45 +00:00
28fe4192f0 nixos/vms: Use async QEMU client 2023-10-31 19:59:20 +00:00
baf605fbe2 nixos/colony: Add rsync job for borgthin 2023-10-31 17:11:20 +00:00
230a9d81cf nixos/castle: Add some extra packages 2023-10-31 16:16:24 +00:00
df1febec6f Add dummy files to get correct tmproot parent permissions 2023-10-31 16:16:02 +00:00
9e9d6404ac Use python3 instead of python310 2023-10-31 16:15:36 +00:00
08bdc5def8 Update inputs 2023-10-31 14:30:11 +00:00
af93a5c72e nixos/estuary: Add IPv6 reverse DNS for mail.nul.ie 2023-09-12 14:28:22 +01:00
4e16ffaa17 nixos/kelder: Switch to AirVPN 2023-09-07 00:05:30 +01:00
d84330d67c nixos/kelder: Finish upgrade (add ddclient replacement) 2023-09-07 00:05:03 +01:00
3286cc0bcb Various GUI fixes 2023-08-27 20:04:53 +01:00
0672e94962 Update inputs 2023-08-27 18:59:07 +01:00
f10ce00f04 nixos/middleman: Add script to deploy mailcow SSL certs 2023-08-27 00:58:55 +01:00
ea03795dca nixos/colony: Add mail server 2023-08-26 23:26:19 +01:00
6439a32c6e nixos/vaultwarden: Add backup 2023-08-06 16:24:36 +01:00
690dd6e70e nixos/vaultwarden: Update for prod use 2023-08-06 15:09:57 +01:00
96bf8bc3ee nixos/castle: Add cifs-utils 2023-08-06 14:50:12 +01:00
1bf3904678 nixos/jackflix: Switch to AirVPN 2023-07-30 15:12:45 +01:00
42c03800c0 nixos/middleman: Add stuff.nul.ie file browser 2023-06-24 17:31:11 +01:00
6044391117 Update inputs (stable -> 23.05) 2023-06-24 16:33:16 +01:00
36c450e507 nixos/gui: Add Nintendo usb udev rule 2023-06-24 13:46:08 +01:00
9d774a762c nixos/gui: Add udev rules for Nvidia RCM 2023-06-24 13:46:08 +01:00
84f3707e78 nixos/kelder: Switch around local redirects 2023-05-28 14:29:04 +01:00
b041f135f3 nixos/kelder: Add SMART and netdata 2023-05-28 13:58:42 +01:00
1f0c3c4160 nixos/kelder: Add custom boot splash 2023-05-28 13:45:27 +01:00
3a5679a76d nixos/kelder: Add Minecraft server 2023-05-28 01:21:41 +01:00
dd31b95945 nixos/kelder: Add Samba 2023-05-28 00:52:17 +01:00
3f3d27d5bd nixos/kelder: Add Nextcloud 2023-05-28 00:14:04 +01:00
822ec211e3 nixos/kelder: Use kontent instead of media 2023-05-27 23:50:08 +01:00
a6db08acda nixos/kelder: Move nginx to separate container 2023-05-27 23:45:53 +01:00
44c5a9ded9 nixos/kelder: Auto-redirect remote accesses to local ones 2023-05-27 20:50:43 +01:00
be901d4222 nixos/kelder: Independent nginx config 2023-05-27 18:44:23 +01:00
75fc5ae163 nixos: Add actual IP / CIDR calculation 2023-05-27 16:57:28 +01:00
1fa718c20a nixos/kelder: Add acquisition 2023-05-23 21:32:38 +01:00
18ad20a8c5 Update inputs 2023-05-14 18:11:57 +01:00
4d74f43d74 nixos/kelder: Improve boot and mounting 2023-05-14 16:33:06 +01:00
214e4f2354 nixos: Implement estuary -> kelder tunnel 2023-05-14 01:12:42 +01:00
875cd4e27d nixos/kelder: Add amogus 2023-05-13 23:45:56 +01:00
e5ad65c4e1 nixos/common: Add unzip 2023-05-13 22:19:56 +01:00
ff01a2aa36 Initial Kontent Kelder 2023-05-13 22:19:45 +01:00
c6c6ee4d72 nixos/castle: Add boardie 2023-04-23 23:44:55 +01:00
28d3a9b83f nixos/castle: Fix pipewire config for jacktrip 2023-04-23 23:08:42 +01:00
5f0db06d99 nixos/castle: Enable AMD pstate driver 2023-04-23 20:22:53 +01:00
e2ed11e1c2 nixos/castle: Add possibly needed amdgpu patch 2023-04-23 20:22:31 +01:00
c0b87a7d4a nixos/castle: Add correct display layout 2023-04-23 19:54:31 +01:00
1e6209e540 nixos/castle: Initial config 2023-04-23 19:13:54 +01:00
e8e6a369cd nixos/tower: Update to kernel 6.2 2023-04-23 12:47:20 +01:00
d427de57fe nixos/firewall: DNAT by IP instead of incoming interface 2023-04-21 15:44:30 +01:00
4d8935ffd6 nixos/estuary: Add Apple peering 2023-04-21 15:14:11 +01:00
7085e9e5ba Update all inputs 2023-04-15 21:17:27 +01:00
665f3407fa nixos/l2mesh: Set VXLAN MTU 2023-04-15 20:47:14 +01:00
438f2c835d nixos/colony: Switch to proper backup LV 2023-02-22 01:26:19 +00:00
c8385a466e nixos/colony: Make fstrim happen right before backup 2023-02-21 14:37:39 +00:00
15721e0894 nixos/shill: Re-enable Jackflix 2023-02-21 14:22:10 +00:00
207697c3b2 nixos: Add borgthin module 2023-02-20 01:43:48 +00:00
b65f1f6df7 nixos/containers: Ensure containers have cgroupsv2 2023-02-19 17:40:05 +00:00
c546331129 nixos/{object,toot}: Ensure postgres is accessible on service start 2023-02-19 17:39:15 +00:00
eceb1ba892 nixos/object: Migrate to SNSD deployment 2023-02-19 16:49:07 +00:00
f17ed65cb8 nixos/colony: Move to new thin pool for NVMe 2023-02-19 16:47:13 +00:00
4b124d216b nixos/tower: Add Steam 2023-02-13 19:43:50 +00:00
dbeee68bdf home-manager/gui: Use first party Spotify client for now 2023-02-13 19:41:21 +00:00
ccdbf0d506 home-manager/gui: Add spotifyd, swaync 2023-02-12 15:20:19 +00:00
b423afb2bb nixos/tmproot: Add boltd 2023-02-11 22:07:39 +00:00
e8e90e6172 nixos/tower: Enable bolt Thunderbolt daemon 2023-02-11 15:28:50 +00:00
0c797a81e0 nixos/estuary: Update home IP 2023-02-01 17:13:44 +00:00
3021405868 nixos/estuary: Add new peerings and upstream 2023-02-01 17:13:27 +00:00
f84f97dc06 nixos/tower: Fix networkd wait-online 2023-02-01 13:12:06 +00:00
250bd96f08 nixos/tower: Update to kernel 6.1 2023-02-01 13:11:49 +00:00
3c25260e79 nixos/middleman: Fix Matrix cross-origin shite 2023-01-13 14:08:09 +00:00
6fe897fd3c nixos/colony: Use temporary LVs until SSD is replaced 2023-01-11 20:06:09 +00:00
1aa16f7de9 nixos/vms: Use legacy QMP client for now 2023-01-08 23:42:37 +00:00
d916f5c5da Switch to ragenix over agenix 2023-01-08 18:50:52 +00:00
b95199f146 Update agenix 2023-01-08 18:20:31 +00:00
304152dbb2 Upgrade NixOS stable to 22.11 and upgrade packages 2023-01-08 17:32:10 +00:00
61b87e3471 nixos/whale2/valheim: Update and disable idle backups 2023-01-08 15:30:40 +00:00
dfaf98a418 nixos/vms: Use systemd Wants= instead of Requires= 2023-01-07 18:02:15 +00:00
6f24632866 nixos/estuary: Add more Cloudflare peering 2023-01-07 15:20:30 +00:00
e6d92eb56b nixos/estuary: Fix ixps nftables config (smh my head) 2023-01-05 14:58:02 +00:00
d85b226707 nixos/whale2: Add whitelist for Valheim 2022-11-28 22:42:27 +00:00
2ba4f88264 nixos/whale2: Update Valheim Docker image 2022-11-26 15:48:30 +00:00
92ef1db3de nixos/estuary: Add direct peering with jurrian 2022-11-23 20:14:28 +00:00
f9ed1d49a2 nixos: Add extra VIPs from ColoClue 2022-11-21 12:16:32 +00:00
48566d2ef9 nixos/estuary: Always SNAT to ColoClue IPv4 2022-11-20 18:42:08 +00:00
d01078dc7b nixos: Add Sharry file sharing service 2022-11-20 18:41:49 +00:00
0038d9c987 Update nixpkgs and home-manager 2022-11-20 04:44:22 +00:00
c42e836d52 nixos/shill: Add Mastodon 2022-11-20 02:43:48 +00:00
d31ec042c4 nixos/estuary: Use routable IPs for DNS queries 2022-11-19 20:31:26 +00:00
80b102581b nixos/estuary: Reduce preference of NL-ix routes slightly 2022-11-19 18:10:47 +00:00
7c523633f4 nixos/estuary: Update networking config for iFog and new IXPs 2022-11-18 11:54:37 +00:00
950bcb3055 nixos/middleman: Fix broken Element Web file downloads 2022-11-18 11:54:37 +00:00
1a847cc121 nixos/estuary: Add Hurricane Electric and LUJE.net over Frys-IX 2022-11-01 13:00:04 +00:00
e2f541ebe2 nixos/estuary: Tweak BGP templates 2022-10-26 22:51:21 +01:00
2805167c67 nixos/estuary: Add config for Frys-IX 2022-10-25 00:14:35 +01:00
bcde359853 nixos/estuary: Disable LLMNR and mDNS 2022-10-20 18:02:27 +01:00
d64f750761 nixos/estuary: Increase NIC TX / RX buffer sizes 2022-10-20 16:54:03 +01:00
02395acaf1 nixos/estuary: Announce and route internal / home prefixes 2022-10-16 19:07:41 +01:00
681ad3fe9f nixos/l2mesh: Initial VXLAN mesh support 2022-10-16 19:07:16 +01:00
2a99bc032c nixos/estuary: Add peering with LUJE.net labs 2022-10-16 18:07:58 +01:00
7df91a6243 nixos/estuary: Fix missing routes from own AS 2022-10-11 01:06:33 +01:00
97de7f4f49 nixos/jackflix: Use Amsterdam VPN 2022-10-09 15:46:45 +01:00
63f1089613 nixos/common: Disable nix-gc in containers 2022-10-09 15:42:14 +01:00
4953a68e8b nixos/estuary: Add bgp.tools monitoring session 2022-10-09 15:02:17 +01:00
8300e49b00 nixos/estuary: Fix BIRD2 startup / route export to kernel 2022-10-08 21:13:16 +01:00
401401f6bc nixos/estuary: Add BGP4 and export routes to kernel 2022-10-08 20:20:10 +01:00
176e603f19 nixos/colony: Fix estuary waiting for ConnectX-2 2022-10-07 20:26:23 +01:00
fcc99a92e9 nixos/estuary: Add initial BIRD2 config 2022-10-06 22:12:30 +01:00
e8d6a702e6 nixos/colony: Initial (attempt at) switch to ColoClue 2022-10-06 19:03:29 +01:00
89e39ca2e2 nixos/tower: Kernel fix to 5.19.14 and power improvements 2022-10-06 11:57:12 +01:00
4f6256d08d nixos/common: Make Nix daemon's TMPDIR /nix/tmp 2022-10-06 11:57:12 +01:00
fdee5ae879 nixos/server: Disable system gui module 2022-10-06 11:57:12 +01:00
d9b0ba2e6e Remove nix-cache.nul.ie for now 2022-10-06 11:57:06 +01:00
4fda577040 nixos/middleman: Add default nginx pages 2022-10-03 22:39:35 +01:00
ccb6be84b5 Add screenshot support 2022-09-09 18:57:14 +01:00
5d04f72d00 nixos/gui: Add fonts 2022-09-09 17:47:27 +01:00
b0054f36d5 nixos/tower: Disable DNSSEC 2022-09-09 17:42:12 +01:00
4b4eaa8dcc nixos/tower: Set bootloader timeout to 10 seconds 2022-09-09 17:39:59 +01:00
5203b9ad98 nixos/tower: Enable doas fingerprint auth 2022-09-09 14:25:39 +01:00
09ddeecf4f nixos/tower: Enable TLP 2022-09-09 14:16:05 +01:00
37b0526524 nixos/tower: Enable bluez 2022-09-09 14:11:34 +01:00
edfe38591b devshell: Use nixos-rebuild instead of calling config directly 2022-09-09 14:11:01 +01:00
5157ca2541 Further configs for tower 2022-09-09 01:04:25 +01:00
64847d5e8e Add initial config for tower 2022-09-08 20:31:44 +01:00
3b55a1fa67 nixos/whale2/valheim: Fix volume names 2022-08-01 23:07:24 +01:00
ca8ad4c043 nixos/whale2: Add Valheim server 😳 2022-08-01 22:55:59 +01:00
9750bc5052 Add OCI container VM 2022-08-01 17:50:52 +01:00
def3d440d0 nixos/chatterbox: Add Heisenbridge 2022-07-22 00:45:25 +01:00
cf053a3f32 home-manager/common: Use nixpkgs flake for pkgs in Nix registry 2022-07-21 11:47:27 +01:00
eef2b0bf8d nixos/shill: Implement basic GC for Nix cache 2022-07-17 02:58:59 +01:00
940aa6145f Fix missing key for cache.nixos.org 2022-07-17 02:56:26 +01:00
b2e06a626c nixos/estuary: bandwidth.py tab to space 2022-07-17 02:31:14 +01:00
dfe714b964 nixos/shill: Don't use own cache 2022-07-16 21:33:07 +01:00
963eeee391 nixos/estuary: Override nix-cache.nul.ie to not hairpin via Cloudflare 2022-07-16 21:32:46 +01:00
1b67ac1da0 Add custom Nix cache to Nix configs 2022-07-16 21:04:11 +01:00
0ca615a389 nixos: Add Hercules CI and Nix cache 2022-07-16 21:03:52 +01:00
accb14721d nixos/shill: Add MinIO container 2022-07-16 15:01:15 +01:00
408177adb3 nixos/estuary: Implement 95% bandwidth limiter 2022-07-10 23:27:57 +01:00
e240b9a54e nixos/estuary: Implement bandwidth limiting 2022-07-10 19:12:16 +01:00
ee7b79c686 nixos/shill: Remove some network sysctls 2022-07-10 18:16:51 +01:00
17b0f9e3de nixos/chatterbox: Production config 2022-07-10 18:16:35 +01:00
f6c5a726de nixos/estuary: Use ndisc6 instead of ping for keepalive thing 2022-07-10 16:18:20 +01:00
c68a48eb34 nixos/middleman: Switch Sonarr, Radarr, Jackett and torrents to prod 2022-07-10 13:07:02 +01:00
5795a04634 nixos/middleman: Switch jackflix away from test 2022-07-08 21:40:59 +01:00
d12fc982f6 nixos/estuary: Add ping service to keep router happy for IPv6 2022-07-07 23:49:22 +01:00
31561867f5 nixos/jackflix: Add speed limits for Transmission 2022-07-07 23:05:39 +01:00
b6f9403d11 nixos/estuary: Set up HE DNS for slave of reverse IPv6 2022-07-07 15:25:52 +01:00
4bf1fba7c5 nixos/estuary: Make authoritative for whole IPv6 prefix 2022-07-07 15:01:14 +01:00
f71ead2bde nixos/estuary: Disable link-local addressing on WAN 2022-07-06 20:51:51 +01:00
414fa50b30 nixos/colony: Fix wan dependencies for estuary 2022-07-01 02:30:29 +01:00
2e63a56dd4 nixos/chatterbox: Disable Matrix server for now 2022-07-01 01:38:20 +01:00
2effd928d7 nixos/estuary: Fix pdns forward-zones 2022-07-01 01:15:45 +01:00
4fd6330274 nixos: Production network configuration 2022-07-01 01:07:38 +01:00
a92358f28b nixos: Add VM TAP FD, use real WAN (via macvtap) and fix deps 2022-06-30 23:16:02 +01:00