75d784a2f7
nix(t14): home module updates
2023-12-22 00:15:29 +01:00
9cc589d594
nix(t14): sway module updates
2023-12-22 00:13:50 +01:00
baf46c25a9
nix(caddy): use wildcards+ switch to njalla
2023-12-22 00:12:22 +01:00
a1ca1b24b1
nix(pkgs): add deadnix,nil
2023-12-22 00:10:27 +01:00
bfca49120e
nix(sysctl): enable ipv6 forwarding
2023-12-22 00:09:52 +01:00
62a29bf478
nix: group inputs
2023-12-22 00:07:22 +01:00
be03aea689
nix(t14): add walls
2023-12-22 00:04:24 +01:00
7863609569
nix(packages): add dmidecode
2023-12-17 23:19:24 +01:00
4e759a7211
nix(t14): enable docker with user namespacing
2023-12-17 00:25:08 +01:00
8c27375415
nix(t14): reconfigure home environment
2023-12-12 20:57:03 +01:00
fdb22c1152
nix: add sanoid module + enable on loki,t14
2023-12-12 20:25:35 +01:00
bac5f3e9e7
nix(t14): enable+configure syncthing
2023-12-11 13:32:34 +01:00
6ae8c2003e
nix(t14): add packages
2023-12-11 13:31:31 +01:00
7217bbd0cb
nix(t14): add some firejail programs
2023-12-11 12:47:36 +01:00
5e74b57b7b
nix(t14,loki): enable zram
2023-12-11 11:25:58 +01:00
b38bdf3e0a
nix(loki): use variable for hostname in prometheus
2023-12-09 21:47:29 +01:00
6f4a415650
nix(t14): experiment with amdgpu.backlight=0
2023-12-09 21:45:18 +01:00
0b780ea269
nix: update the dnscrypt-proxy module
2023-12-09 21:44:46 +01:00
10243fe4eb
nix: add t14 system configuration
...
meaning reencrypt shared secrets to the new key...
also, make use of nixos-hardware's module for t14
2023-12-04 20:19:11 +01:00
54b6e38852
nix(loki): add nextcloud container module
2023-12-03 22:40:55 +01:00
a09d7632a5
nix(loki): enable podman
2023-12-03 22:40:10 +01:00
2477d1ffbe
nix(loki): decrease subuid count
2023-12-03 18:12:14 +01:00
02dd6dcfd7
nix(loki): disable nix-serve
2023-12-02 21:46:21 +01:00
acc9d912b0
nix: add bottom pkg
2023-12-02 21:41:23 +01:00
86fca470fe
coredns: point cloud,grocy records to loki
2023-12-02 21:34:29 +01:00
1ddd61642d
coredns: fix NS records
2023-12-02 21:33:52 +01:00
84518224e2
nix: add monoceros system configuration
2023-12-02 19:15:45 +01:00
588b0b5a5c
nix(coredns): force user, force restart always...
...
... and set MemoryDenyWriteExecute = true.
2023-11-24 16:27:07 +01:00
ca699f1dbe
nix(loki): add wol pkg
2023-11-21 22:14:33 +01:00
c90bd1553e
nix: use vars some more
2023-11-21 22:14:04 +01:00
d125d70562
nix: extract {net,coredns} stuff into a module
...
* set up global secrets (sops)
* import common network (lan/tailscale) settings in pertinent places
* use common coredns module for both nixpi and loki
2023-11-17 22:15:11 +01:00
fc20cc832b
nix(coredns): properly declare nameservers + other
2023-11-13 22:47:06 +01:00
50d1e4ad99
nix: add nixpi system configuration
2023-11-05 00:17:44 +01:00
04b877ddb1
nix: add loki system configuration
2023-10-15 22:16:06 +02:00
253c68f590
tf: add tailscale configuration
2023-08-03 22:37:07 +02:00
b3673f9a2f
role(sshconfigdmachine): update machines file
2023-08-03 11:08:44 +02:00
4a212bde39
role(headscale): set firewall+add handler
2023-08-02 20:43:50 +02:00
202f2e2e29
tf: bump nbgw to g6-standard-2
2023-08-02 18:04:55 +02:00
062c26644d
add sshconfigdmachines role+use on surtur
2023-08-02 13:52:09 +02:00
5189696bea
surtur: use sshconfig role
2023-08-02 13:51:21 +02:00
66d0701a57
add sshconfig role
2023-08-02 13:49:47 +02:00
90ced67557
surtur,nebula: rm unneeded vars_files blocks
2023-08-02 13:14:59 +02:00
35d2ca23d7
add vela, enable firewalld
2023-08-02 13:14:09 +02:00
139cf06bcf
mv surtur's vault to idiomatic location+symlink
2023-08-02 13:05:28 +02:00
ed4bdb0987
role(headscale): restart containers conditionally
2023-08-02 12:44:34 +02:00
eb0da91152
enable firewalld for all
2023-08-02 12:34:32 +02:00
994f475e11
add firewalld role
2023-08-02 12:32:43 +02:00
e7ac3d67c2
chore: split off fedora pkgs + rm default nano
2023-08-01 22:37:05 +02:00
152e88bc77
add tags to roles in playbooks; scope vaults
2023-08-01 22:34:57 +02:00
782755b4a3
fix inventory
2023-08-01 22:17:18 +02:00