about summary refs log tree commit diff
path: root/ops/nixos
AgeCommit message (Collapse)AuthorFilesLines
2020-03-01 r/589 fix(ops/nixos/camden): Add required options for ACME updatesVincent Ambo1-12/+17
The implementation for provisioning ACME certificates has changed in nixos-unstable[0] and now requires a few extra options to be set. [0]: https://github.com/NixOS/nixpkgs/pull/77578
2020-03-01 r/588 chore(third_party): Remove guile 3.0 overrideVincent Ambo1-1/+1
I don't actually use guile at all, this was just for experimentation.
2020-03-01 r/586 chore(ops/nixos/nugget): Use DHCP for Remarkable USB connectionVincent Ambo1-0/+1
2020-02-21 r/567 fix(ops/nixos/camden): Add missing quote in nginx configVincent Ambo1-1/+1
2020-02-21 r/566 feat(ops/nixos/camden): Modify nginx log formatVincent Ambo1-8/+8
This log format contains more structured and correctly typed information, which I can now use for dashboards and stuff in Stackdriver.
2020-02-21 r/565 fix(ops/nixos/camden): Configure nginx to not log hostnamesVincent Ambo1-1/+1
Hostname prefixes break JSON serialisation, leading to useless Stackdriver Logging entries.
2020-02-21 r/564 feat(ops/nixos/camden): Install jqVincent Ambo1-0/+1
2020-02-21 r/563 feat(ops/nixos/camden): Forward logs to Stackdriver LoggingVincent Ambo1-0/+8
Enables the journaldriver service to forward logs into a "home" log-stream in the "tazjins-infrastructure" project. The service account key for camden has been placed on the machine manually.
2020-02-21 r/562 chore(ops/nixos/nugget): Remove input-fonts packageVincent Ambo1-1/+0
My default font is now Jetbrains Mono everywhere.
2020-02-21 r/559 chore: Rename pkgs->depot in all Nix file headersVincent Ambo3-31/+27
2020-02-17 r/557 Merge branch 'fix/camden-trusted-users'Vincent Ambo1-0/+2
2020-02-17 fix(ops/nixos/camden): Add myself to trusted Nix usersVincent Ambo1-0/+2
2020-02-17 r/556 fix(ops/nixos/camden): Use pounce from //third_partyVincent Ambo1-1/+1
2020-02-17 r/553 feat(ops/nixos/camden): Install pounce on camdenVincent Ambo1-1/+8
2020-02-17 r/552 feat(ops/nixos/camden): Enable support for moshVincent Ambo1-0/+2
2020-02-17 r/551 Merge branch 'feat/camden-migration'Vincent Ambo1-1/+1
2020-02-17 chore(ops/nixos/nugget): Add /etc/hosts entries for camden hostnamesVincent Ambo1-1/+1
2020-02-14 r/550 refactor(ops/nixos/camden): Merge ACME certificate blocksVincent Ambo1-11/+7
2020-02-14 r/549 feat(camden): Move to actual tazj.in hostnamesVincent Ambo1-4/+15
2020-02-12 r/548 feat(ops/nixos/nugget): Add camden to /etc/hostsVincent Ambo1-0/+7
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN.
2020-02-12 r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camdenVincent Ambo1-0/+21
2020-02-12 r/546 feat(ops/nixos/camden): Move ACME configuration out of nginxVincent Ambo1-4/+13
This makes it possible to re-use the same provisioning mechanism for multiple related domains.
2020-02-12 r/545 feat(ops/nixos/camden): Set up cgit serviceVincent Ambo1-5/+27
Adds a user & group which are configured to own the local depot copy, and a cgit service to serve it. The depot checkout was configured as: mkdir -p /var/git && chown git: /var/git # now, as the git user, in /var/git git clone --bare ... depot chmod -R g+rw /var/git chmod g+s (find /var/git -type d) git init --bare --shared=all depot My personal user is a member of the git group, which means that after the above configuration I can push to the bare repo as my user and things work. Also, crucially, the `post-update` hook must be enabled as cgit uses the dumb HTTP transport.
2020-02-11 r/543 fix(nix/tailscale): Fix incorrect Tailscale ACL config typeVincent Ambo1-8/+10
2020-02-11 r/542 feat(ops/nixos/camden): Serve /blobs/ from /var/www/blobsVincent Ambo1-1/+5
This directory is writeable by me and is intended to make it easy to serve random blobs.
2020-02-11 r/541 feat(ops/nixos/camden): Enable haveged entropy "generator"Vincent Ambo1-3/+4
2020-02-11 r/540 feat(ops/nixos/nugget): Set up nginx serving homepage & blogVincent Ambo1-0/+53
This nginx does not currently log access correctly because for some impenetrable reason (as is tradition), neither /dev/stdout nor /dev/fd/1 exist for nginx at runtime. This is probably systemd's doing, but I'll debug it later.
2020-02-11 r/538 fix(ops/nixos/camden): Use package set from depot pinVincent Ambo1-2/+9
2020-02-11 r/537 feat(nix/tailscale): Add function for generating tailscale ACLsVincent Ambo1-1/+8
... and use it on Camden!
2020-02-11 r/536 feat(ops/nixos/camden): Join camden.tazj.in into Tailscale meshVincent Ambo1-3/+21
2020-02-11 r/535 fix(ops/nixos): Add camden to rebuilder scriptVincent Ambo1-0/+4
This should probably be templated instead.
2020-02-11 r/534 feat(ops/nixos): Add initial configuration for host camdenVincent Ambo3-7/+96
2020-02-11 r/533 feat(ops/nixos/nugget): Enable tailscale-relayVincent Ambo1-0/+12
2020-02-11 r/532 feat(ops/nixos): Add NixOS module for running tailscaleVincent Ambo2-0/+78
This uses the "legacy" tailscale Linux client, but built from source as per the previous commits.
2020-02-11 r/530 chore(ops/nixos/nugget): Install tailscale on nuggetVincent Ambo1-0/+1
2020-02-08 r/483 feat(ops/nixos/nugget): Install i3lockVincent Ambo1-0/+1
2020-02-07 r/478 feat(ops/nixos/nugget): Enable pcscd & install Yubikey toolsVincent Ambo1-0/+8
2020-02-04 r/476 feat(ops/nixos/nugget): Enable U2F hardware supportVincent Ambo1-0/+1
2020-01-25 r/456 feat(ops/nixos/nugget): Install unzipVincent Ambo1-0/+1
2020-01-20 r/435 feat(ops/nixos/nugget): Enable Keybase "service"Vincent Ambo1-0/+2
2020-01-19 r/423 feat(third_party/guile): Override guile to version 3.0.0Vincent Ambo1-0/+1
Lets try this thing out!
2020-01-19 r/422 feat(ops/nixos/nugget): Install millerVincent Ambo1-0/+1
2020-01-19 r/419 chore(ops/nixos/nugget): Aimlessly tweak font configurationVincent Ambo1-0/+11
These settings seem to be very mildly better than what I had before, but I'm not entirely sure.
2020-01-19 r/416 feat(ops/nixos/nugget): Connect to wifi & install Google ChromeVincent Ambo1-0/+10
This adds configuration which, sometimes, when the stars align just right, makes it possible to cast to the Chromecast from nugget.
2020-01-18 r/401 feat(nixos/nugget): Install cachix binaryVincent Ambo1-0/+1
2020-01-07 r/339 feat(ops/nixos/nugget): Install SBCL in system packagesVincent Ambo1-0/+2
2020-01-05 r/333 feat(ops/nixos/nugget): Install msmtp & lieer timersVincent Ambo1-1/+24
2020-01-05 r/332 chore(ops/nixos/nugget): Install various needed packagesVincent Ambo1-0/+4
2020-01-04 r/330 feat(ops/nixos): Add 'rebuilder' helper scriptVincent Ambo2-5/+29
This script rebuilds & activates system configuration based on the hostname. Currently since there is only one host this isn't particularly interesting.
2020-01-04 r/329 feat(ops/nixos): Check in updated system configuration for 'nugget'Vincent Ambo3-56/+194
This is the rebrand of the desktop machine, now running a config straight out of the depot.
generated by cgit-pink 1.4.1 (git 2.44.2) at 2024-11-18T15·45+0000