Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2020-04-26 | r/696 feat(ops/nixos/nugget): Enable SSH agent on nugget | Vincent Ambo | 1 | -0/+1 | |
2020-04-26 | r/695 feat(ops/nixos/camden): Enable SSH agent auth | Vincent Ambo | 1 | -0/+3 | |
2020-04-26 | r/694 feat(ops/nixos/nugget): Install idualctl | Vincent Ambo | 1 | -0/+1 | |
2020-04-26 | r/693 fix(ops/nixos/camden): Use new //fun/idual CLI structure | Vincent Ambo | 1 | -1/+2 | |
2020-04-26 | r/690 feat(ops/nixos/camden): Disable camden firewall | Vincent Ambo | 1 | -1/+1 | |
The local network is considered trusted and ingress from the outside world is now handled by the Edgerouter. | |||||
2020-04-26 | r/688 feat(fun/idual && nixos/camden): Add light alarm systemd units | Vincent Ambo | 1 | -1/+11 | |
Adds a systemd unit to run the idual light alarm using a transient timer created by systemd-run. | |||||
2020-04-25 | r/684 chore(ops/nixos/nugget): Remove camden from /etc/hosts | Vincent Ambo | 1 | -4/+0 | |
The new router can actually deal with this sensibly. | |||||
2020-04-22 | r/669 fix(ops/nixos/camden): Introduce brute-force nginx issue fix | Vincent Ambo | 1 | -0/+19 | |
This adds a timer running every minute that fixes the nginx permissions that were broken in NixOS 20.03 | |||||
2020-04-21 | feat(ops/nixos/camden): Install 'bat' and 'ripgrep' on camden | Vincent Ambo | 1 | -0/+2 | |
2020-04-21 | feat(ops/nixos/camden): Use my cachix cache on camden | Vincent Ambo | 1 | -0/+8 | |
This cache is populated by sourcehut builds. | |||||
2020-04-21 | r/650 feat(ops/nixos/camden): Add vhost for TVL homepage | Vincent Ambo | 1 | -0/+15 | |
2020-04-21 | r/648 feat(ops/nixos/camden): Provision certificate for tvl.fyi | Vincent Ambo | 1 | -0/+7 | |
2020-04-20 | r/640 feat(ops/nixos/camden): Add static IPv6 address to camden | Vincent Ambo | 1 | -0/+7 | |
2020-04-19 | r/639 feat(ops/nixos/camden): Configure honk service | Vincent Ambo | 1 | -0/+18 | |
2020-04-19 | r/637 feat(ops/nixos/camden): Install honk | Vincent Ambo | 1 | -0/+1 | |
2020-04-17 | r/630 feat(ops/nixos/nugget): Add chromium with VAAPI patches | Vincent Ambo | 1 | -2/+2 | |
These patches enable hardware-accelerated video decoding, which is useful for Stadia. The main issue with this is that Hydra doesn't currently cache Chromium with these patches, which means that it is built from scratch which takes in the order of 5 hours on an otherwise unused nugget. | |||||
2020-04-11 | r/629 chore(ops/nixos/nugget): Install steam again | Vincent Ambo | 1 | -0/+1 | |
2020-04-04 | r/626 chore(ops/nixos/camden): Enable HSTS headers on *.tazj.in | Vincent Ambo | 1 | -0/+2 | |
2020-04-04 | r/623 chore(ops/nixos/camden): Use upstream tailscale module | Vincent Ambo | 1 | -18/+1 | |
2020-04-04 | r/622 chore(ops/nixos/nugget): Use upstream tailscale module | Vincent Ambo | 1 | -8/+1 | |
2020-04-04 | r/621 chore(third_party): Remove Tailscale derivation | Vincent Ambo | 1 | -77/+0 | |
This is now part of nixpkgs itself. | |||||
2020-04-04 | r/618 feat(ops/nixos/camden): Enable RTMP support in nginx | Vincent Ambo | 1 | -1/+25 | |
This makes it possible to live-stream various things at rtmp://tazj.in/tvl | |||||
2020-04-04 | r/617 fix(ops/nixos/nugget): Point camden host at new internal IP | Vincent Ambo | 1 | -4/+1 | |
This changed due to the router replacement. | |||||
2020-04-04 | r/616 chore(ops/nixos/nugget): Install ffmpeg (including libnpp support) | Vincent Ambo | 1 | -0/+1 | |
2020-04-04 | r/615 feat(ops/nixos/nugget): Add module for v4l2loopback support | Vincent Ambo | 2 | -0/+13 | |
This kernel module creates a fake video input device to which I can stream various things, such as screen grabs or qyliss' video stream for TVL. | |||||
2020-04-04 | r/611 feat(ops/nixos/nugget): Install clang & friends system-wide | Vincent Ambo | 1 | -0/+3 | |
2020-03-12 | r/602 fix(ops/nixos/nugget): Ensure that 'nuggetEmacs' is used for EXWM | Vincent Ambo | 1 | -7/+8 | |
2020-03-12 | r/601 chore(ops/nixos/nugget): Disable DHCP for Remarkable USB conn | Vincent Ambo | 1 | -1/+0 | |
This otherwise holds up the boot process if the device is not connected, which is annoying. | |||||
2020-03-12 | r/600 feat(ops/nixos/nugget): Install google-c-style in Emacs | Vincent Ambo | 1 | -1/+6 | |
2020-03-01 | r/589 fix(ops/nixos/camden): Add required options for ACME updates | Vincent Ambo | 1 | -12/+17 | |
The implementation for provisioning ACME certificates has changed in nixos-unstable[0] and now requires a few extra options to be set. [0]: https://github.com/NixOS/nixpkgs/pull/77578 | |||||
2020-03-01 | r/588 chore(third_party): Remove guile 3.0 override | Vincent Ambo | 1 | -1/+1 | |
I don't actually use guile at all, this was just for experimentation. | |||||
2020-03-01 | r/586 chore(ops/nixos/nugget): Use DHCP for Remarkable USB connection | Vincent Ambo | 1 | -0/+1 | |
2020-02-21 | r/567 fix(ops/nixos/camden): Add missing quote in nginx config | Vincent Ambo | 1 | -1/+1 | |
2020-02-21 | r/566 feat(ops/nixos/camden): Modify nginx log format | Vincent Ambo | 1 | -8/+8 | |
This log format contains more structured and correctly typed information, which I can now use for dashboards and stuff in Stackdriver. | |||||
2020-02-21 | r/565 fix(ops/nixos/camden): Configure nginx to not log hostnames | Vincent Ambo | 1 | -1/+1 | |
Hostname prefixes break JSON serialisation, leading to useless Stackdriver Logging entries. | |||||
2020-02-21 | r/564 feat(ops/nixos/camden): Install jq | Vincent Ambo | 1 | -0/+1 | |
2020-02-21 | r/563 feat(ops/nixos/camden): Forward logs to Stackdriver Logging | Vincent Ambo | 1 | -0/+8 | |
Enables the journaldriver service to forward logs into a "home" log-stream in the "tazjins-infrastructure" project. The service account key for camden has been placed on the machine manually. | |||||
2020-02-21 | r/562 chore(ops/nixos/nugget): Remove input-fonts package | Vincent Ambo | 1 | -1/+0 | |
My default font is now Jetbrains Mono everywhere. | |||||
2020-02-21 | r/559 chore: Rename pkgs->depot in all Nix file headers | Vincent Ambo | 3 | -31/+27 | |
2020-02-17 | r/557 Merge branch 'fix/camden-trusted-users' | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | fix(ops/nixos/camden): Add myself to trusted Nix users | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | r/556 fix(ops/nixos/camden): Use pounce from //third_party | Vincent Ambo | 1 | -1/+1 | |
2020-02-17 | r/553 feat(ops/nixos/camden): Install pounce on camden | Vincent Ambo | 1 | -1/+8 | |
2020-02-17 | r/552 feat(ops/nixos/camden): Enable support for mosh | Vincent Ambo | 1 | -0/+2 | |
2020-02-17 | r/551 Merge branch 'feat/camden-migration' | Vincent Ambo | 1 | -1/+1 | |
2020-02-17 | chore(ops/nixos/nugget): Add /etc/hosts entries for camden hostnames | Vincent Ambo | 1 | -1/+1 | |
2020-02-14 | r/550 refactor(ops/nixos/camden): Merge ACME certificate blocks | Vincent Ambo | 1 | -11/+7 | |
2020-02-14 | r/549 feat(camden): Move to actual tazj.in hostnames | Vincent Ambo | 1 | -4/+15 | |
2020-02-12 | r/548 feat(ops/nixos/nugget): Add camden to /etc/hosts | Vincent Ambo | 1 | -0/+7 | |
At the moment there is no other way for requests from nugget to camden to resolve correctly, as the Hyperoptic router is eating this traffic on the LAN. | |||||
2020-02-12 | r/547 feat(ops/nixos/camden): Add nginx vhost for cgit at git.camden | Vincent Ambo | 1 | -0/+21 | |