71baa09bd2
Refactor imports and secrets. Add per system properties and role based secret access.
...
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
f68a4f4431
nixpkgs-fmt everything
2023-04-04 23:30:28 -06:00
d1e6d21d66
iperf server
2023-03-25 15:48:39 -06:00
c48b1995f8
Remove zerotier
2023-03-18 20:41:09 -06:00
db441fcf98
Add ability to refuse PIA ports
2023-03-12 21:46:36 -06:00
63f2a82ad1
ignore lid close for NAS
2023-03-03 00:16:57 -07:00
3e0cde40b8
Cleanup remote LUKS unlock
2023-02-11 18:40:08 -07:00
2c8576a295
Hardware accelerated encoding for jellyfin
2023-02-11 16:10:19 -07:00
8aecc04d01
config cleanup
2023-02-11 16:10:10 -07:00
cb2ac1c1ba
Use x86 machine for NAS
2023-02-11 16:08:48 -07:00
c649b04bdd
Update ssh keys and allow easy ssh LUKS unlocking
2023-02-11 15:05:20 -07:00
aa7bbc5932
Use Tailscale
2022-06-23 22:30:07 -04:00
7e615f814d
Rewrite VPN container
2022-05-28 18:54:41 -04:00
c560a63182
More vpn options
2022-05-27 16:43:25 -04:00
2f14d07f82
Proxy jellyfin correctly
2022-05-20 19:30:14 -04:00
a89fde8aa5
Don't export bazarr
2022-05-20 19:15:33 -04:00
1856fe00d6
Jellyfin open port
2022-05-20 18:58:13 -04:00
918b53e383
Move jellyfin to container
2022-05-20 16:37:05 -04:00
c85beff7ed
SSDs for NAS
2022-04-26 00:57:11 -04:00
7ab4906710
Use '*.containers' instead of ips
2022-04-25 00:46:40 -04:00
acbf162ffe
Use latest pykms
2022-04-24 21:54:04 -04:00
60771ea56e
Access transmission files over samba
2022-04-23 04:32:19 -04:00
af9333feff
Ponyo as media proxy
2022-04-21 02:24:45 -04:00
b4dce62d36
Fix permissions
2022-04-19 16:31:26 -04:00
e15b612b3c
Shared group/user for consistent permissions+access
2022-04-17 23:43:42 -04:00
6233ce6c0d
navidrome over cloudflared
2022-04-17 20:36:04 -04:00
1a4bdc4a8a
Enable zerotier
2022-04-17 19:06:56 -04:00
73da58f6bf
Bigger HDD
2022-04-13 21:15:35 -04:00
10f054a9d9
Bigger HDD
2022-04-12 17:25:08 -04:00
fdedd6fe4d
Basic NAS services
2022-04-09 19:20:15 -04:00
1bb464f966
NAS Samba+Plex
2022-04-07 12:27:49 -04:00
ba570ec51a
Swap for NAS
2022-04-07 12:26:56 -04:00
c5efc2db4d
Cleanup
2022-04-07 12:23:21 -04:00
f386bc8871
bcachefs rootfs on helios64
2022-04-06 19:45:36 -04:00
c8bf265f83
Small changes
2022-04-06 19:43:40 -04:00
4d80638ab8
Enable bcachefs
2022-03-16 01:44:00 -04:00
0e9d3f53e7
typo
2022-03-16 01:38:17 -04:00
6673463214
Helios64 use upstream kernel + bcachefs
2022-03-16 01:31:24 -04:00
67911a43bc
update automatically
2022-03-08 18:54:56 -05:00
4332ee2ab2
for education purposes
2022-03-08 18:13:04 -05:00
zuckerberg
50ea80ad32
helios64 working
2022-03-07 23:51:10 -05:00
zuckerberg
64dd1c28c3
load hardware configuration
2022-03-01 19:05:30 -05:00
zuckerberg
58f3ab1c1b
LUKS disk id
2022-03-01 19:03:28 -05:00
zuckerberg
7feddbcceb
Helios64 NAS
2022-03-01 18:08:17 -05:00
zuckerberg
37ef2ba199
applications, fix helios64 kernel
2021-07-01 09:47:06 -04:00
zuckerberg
7118b9fbf6
common import
2021-06-22 21:23:29 -04:00
zuckerberg
8ad73f49d7
fix config conflict
2021-05-09 09:12:51 -04:00
zuckerberg
d5efae37aa
fix config conflict
2021-05-09 09:12:01 -04:00
zuckerberg
8a6d0b8a4b
fix config conflict
2021-05-09 09:11:15 -04:00
zuckerberg
3d3dfe68d9
fix config conflict
2021-05-09 09:10:39 -04:00
