Commit Graph

65 Commits

Author SHA1 Message Date
zuckerberg 84745a3dc7 Remove recyclarr, I'm not using it currently 2026-03-14 18:58:29 -07:00
zuckerberg 6a0540dddd Update attic-netrc
Check Flake / check-flake (push) Has been cancelled
2026-02-26 22:47:28 -08:00
zuckerberg 200d5a5d22 Add ntfy failure alerts for all systemd services
Check Flake / check-flake (push) Successful in 3m18s
2026-02-22 16:19:43 -08:00
zuckerberg 5a0a525f64 Add Attic binary cache and containerize gitea runner
Replace nix-serve-only setup with Attic for managed binary caching with
upstream filtering and GC. Move gitea actions runner from host into an
isolated NixOS container with private networking. nix-serve kept alongside
Attic during migration.
2026-02-21 21:43:08 -08:00
zuckerberg 10f3e3a7bf Remove old stale/unused configuration 2026-02-11 22:47:38 -08:00
zuckerberg 51fbae98c5 Update digitalocean key
Check Flake / check-flake (push) Successful in 5m51s
2026-01-14 19:32:21 -08:00
zuckerberg f053c677e8 Set up openwebui + ollama 2026-01-10 23:02:43 -08:00
zuckerberg cf087b0e39 Add fry
Check Flake / check-flake (push) Successful in 1h22m48s
2025-10-12 13:36:02 -07:00
zuckerberg b58df0632a Add outline service
Check Flake / check-flake (push) Successful in 15m2s
2025-08-10 20:49:50 -07:00
zuckerberg a5d0b3b748 Bring back APU2 router for more experimentation
Check Flake / check-flake (push) Successful in 19m21s
2025-08-05 19:45:50 -07:00
zuckerberg dbde2a40f2 Add linkwarden 2025-08-05 19:42:29 -07:00
zuckerberg be23526c2c Add KeepassXC keys, remove some very old user keys, and rekey
Check Flake / check-flake (push) Successful in 1m50s
2025-07-16 22:01:33 -07:00
zuckerberg 82b67ed566 Add Whiteboard app to Nextcloud
Check Flake / check-flake (push) Successful in 2m17s
2025-07-16 20:49:39 -07:00
zuckerberg fe0ce3a245 Get recyclarr initially running 2025-07-12 10:48:13 -07:00
zuckerberg eb6a50664c Upgrade NixOS. Use upstream libedgetpu, frigate, and gasket kernel module. Fix services broken by upgrade.
Check Flake / check-flake (push) Successful in 17m43s
2024-11-19 21:28:56 -08:00
zuckerberg 8ff552818b Rollover digital ocean auth token
Check Flake / check-flake (push) Successful in 1m13s
2024-10-27 16:41:02 -07:00
zuckerberg c7d9e84f73 Lock down access to mqtt
Check Flake / check-flake (push) Successful in 1m6s
2024-10-27 16:15:23 -07:00
zuckerberg 0b3322afda First VLAN camera in frigate 2024-06-29 10:13:03 -06:00
zuckerberg d557820d6c Lockdown intranet services behind tailscale 2024-06-21 21:04:49 -06:00
zuckerberg b7f82f2d44 Consolidate common PC config
Check Flake / check-flake (push) Successful in 1m14s
2024-06-03 21:07:53 -06:00
zuckerberg 37bd7254b9 Add Howl
Check Flake / check-flake (push) Successful in 1m54s
2024-05-31 23:29:39 -06:00
zuckerberg bfc1bb2da9 Use a makefile for utility snippets
Check Flake / check-flake (push) Successful in 12m54s
2024-02-18 17:30:52 -07:00
zuckerberg 7e812001f0 Add librechat
Check Flake / check-flake (push) Successful in 6m12s
2024-02-09 19:57:09 -07:00
zuckerberg 932b05a42e Basic oauth proxy for frigate
Check Flake / check-flake (push) Successful in 1m13s
2024-01-30 22:12:18 -07:00
zuckerberg b5cc4d4609 Emulate ARM systems for building 2024-01-30 21:59:09 -07:00
zuckerberg 84e1f6e573 wireless role was removed 2023-12-02 10:26:44 -07:00
zuckerberg 8dfba8646c Fix CI builder
Check Flake / check-flake (push) Successful in 1m5s
2023-10-20 19:52:33 -06:00
zuckerberg 52ed25f1b9 Push derivations built during nix flake check to binary cache
Check Flake / check-flake (push) Failing after 1m17s
2023-10-15 18:00:38 -06:00
zuckerberg 0446d18712 Use official nixos module for gitea actions runner 2023-10-15 17:58:03 -06:00
zuckerberg a256ab7728 Rekey secrets 2023-08-10 19:44:20 -06:00
zuckerberg 96de109d62 Basic binary cache
Check Flake / check-flake (push) Successful in 7m55s
2023-04-29 20:33:10 -06:00
zuckerberg 0efcf8f3fc Flake check gitea action
Check Flake / check-flake (push) Successful in 1m28s
2023-04-29 19:20:48 -06:00
zuckerberg 2009180827 Add mail user 2023-04-29 18:24:20 -06:00
zuckerberg 832894edfc Gitea runner 2023-04-23 10:29:18 -06:00
zuckerberg 38c2e5aece Fix properties.nix path loading 2023-04-21 23:24:05 -06:00
zuckerberg 03603119e5 Fix invalid import issue. 2023-04-21 18:57:06 -06:00
zuckerberg 71baa09bd2 Refactor imports and secrets. Add per system properties and role based secret access.
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
zuckerberg 40f0e5d2ac Add Phil 2023-04-19 18:12:42 -06:00
zuckerberg 3412d5caf9 Use hashed passwordfile just to be safe 2023-04-09 23:00:10 -06:00
zuckerberg 1065cc4b59 Enable gitea email notifications 2023-04-09 22:05:23 -06:00
zuckerberg 378cf47683 restic backups 2023-04-08 21:25:55 -06:00
zuckerberg 3c683e7b9e NixOS router is now in active use :) 2023-04-04 20:53:38 -06:00
zuckerberg 68bd70b525 Basic router working using the wip hostapd module from upstream 2023-04-04 12:57:16 -06:00
zuckerberg 7f1e304012 Remove stale secrets 2023-02-11 15:19:35 -07:00
zuckerberg 9e3dae4b16 Rekey secrets 2023-02-11 15:07:08 -07:00
zuckerberg f5a9f04cf2 Rekey secrets 2022-08-25 23:16:22 -04:00
zuckerberg dfec18e904 Send mail through mailgun 2022-05-03 18:33:48 -04:00
zuckerberg 5ac5b4551b Rekey secrets 2022-05-02 11:56:25 -04:00
zuckerberg e37878c544 Automount samba shares 2022-04-24 21:56:28 -04:00
zuckerberg d5d986dd88 Rekey secrets 2022-04-21 01:26:53 -04:00