25 Commits

Author SHA1 Message Date
a256ab7728 Rekey secrets 2023-08-10 19:44:20 -06:00
96de109d62 Basic binary cache
All checks were successful
Check Flake / check-flake (push) Successful in 7m55s
2023-04-29 20:33:10 -06:00
0efcf8f3fc Flake check gitea action
All checks were successful
Check Flake / check-flake (push) Successful in 1m28s
2023-04-29 19:20:48 -06:00
2009180827 Add mail user 2023-04-29 18:24:20 -06:00
832894edfc Gitea runner 2023-04-23 10:29:18 -06:00
38c2e5aece Fix properties.nix path loading 2023-04-21 23:24:05 -06:00
03603119e5 Fix invalid import issue. 2023-04-21 18:57:06 -06:00
71baa09bd2 Refactor imports and secrets. Add per system properties and role based secret access.
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
3412d5caf9 Use hashed passwordfile just to be safe 2023-04-09 23:00:10 -06:00
1065cc4b59 Enable gitea email notifications 2023-04-09 22:05:23 -06:00
378cf47683 restic backups 2023-04-08 21:25:55 -06:00
3c683e7b9e NixOS router is now in active use :) 2023-04-04 20:53:38 -06:00
68bd70b525 Basic router working using the wip hostapd module from upstream 2023-04-04 12:57:16 -06:00
7f1e304012 Remove stale secrets 2023-02-11 15:19:35 -07:00
dfec18e904 Send mail through mailgun 2022-05-03 18:33:48 -04:00
e37878c544 Automount samba shares 2022-04-24 21:56:28 -04:00
6233ce6c0d navidrome over cloudflared 2022-04-17 20:36:04 -04:00
43e31a8d2d WolframAlpha For drastikbot 2022-03-27 19:23:07 -04:00
504e4efad6 Usermode spotifyd + spotify-tui 2022-03-13 19:59:17 -04:00
zuckerberg
2b13b6b9f6 iodine DNS tunnel 2021-09-06 11:52:49 -04:00
zuckerberg
acf786d0d9 nextcloud 2021-08-29 10:36:24 -04:00
zuckerberg
10ea702481 migrate email server 2021-08-28 22:34:57 -04:00
zuckerberg
95a39c77e3 attempt at peertube 2021-08-02 13:10:14 -04:00
zuckerberg
e7b9b46f44 store pia secret in git 2021-06-22 20:48:05 -04:00
zuckerberg
b0ae5e394f use agenix 2021-06-14 22:48:23 -04:00