aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/do-rproxy (unfollow)
Commit message (Collapse)AuthorFilesLines
2025-10-23move a few more things back as profilesFranck Cuny1-0/+3
2025-10-23webfinger setup to support tailscaleFranck Cuny1-43/+94
Based on https://tailscale.com/kb/1240/sso-custom-oidc and https://github.com/randomnetcat/nix-configs/blob/f1963827395d6c82a7e64267fde9b0c82da02380/hosts/bear/auth/default.nix#L134
2025-10-18move keycloak and forgejo on rivendellFranck Cuny2-5/+5
I had to rekey all the secrets. Updated the documentation for both how to setup forgejo and keycloak.
2025-10-18configure wireguard for rivendellFranck Cuny1-0/+7
2025-10-13introduce a module for digital ocean dropletFranck Cuny2-71/+3
2025-10-13consistent home-manager configuration for all nixos hostsFranck Cuny2-15/+0
2025-10-09configure podman for all nixos machinesFranck Cuny1-2/+0
2025-10-09import home-manager.nix and user.nix by default on nixosFranck Cuny1-2/+0
2025-10-09automatically import home-manager.nix for all hostsFranck Cuny1-1/+0
2025-10-09more simplification of the configurationFranck Cuny1-3/+0
2025-10-09move common modules under modules/Franck Cuny1-1/+0
Simplify the import on the various hosts.
2025-10-06nix configuration is applied by default to nixos machinesFranck Cuny1-2/+0
2025-09-12start to refactor nixos modulesFranck Cuny1-1/+0
2025-09-08Revert "move droplet specific settings to its own module"Franck Cuny2-3/+61
This reverts commit 3b47113c28c5180d4d5d710e3c1fe74f95aa7226.
2025-09-08move droplet specific settings to its own moduleFranck Cuny2-61/+3
2025-09-07move deployment bits to colmena declarationFranck Cuny1-7/+0
2025-09-07the resume is in HTMLFranck Cuny1-2/+0
2025-09-06run my personal website on the dropletFranck Cuny1-1/+28
2025-09-01initial attempt at using colmena to deploy nixos configurationsFranck Cuny1-0/+7
Can be used that way: ``` colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx' ``` or ``` colmena --impure apply dry-activate --on synology-vm ```
2025-08-30switch to nginxFranck Cuny4-75/+76
For some reasons, I can't get compression to work with Caddy, and I don't get much benefit from it in the first place anyway.
2025-08-24run `goget` on `go.fcuny.net`Franck Cuny1-0/+14
2025-08-20initial configuration for fail2banFranck Cuny1-0/+1
We need to ensure the firewall is enabled and let's ensure that we open the port for SSH.
2025-08-17create a new systemd slice for critical servicesFranck Cuny1-8/+1
2025-08-14add keycloak for OAuth, runbooks, and finish forgejo setupFranck Cuny1-0/+14
2025-08-12initial setup for forgejo and caddyFranck Cuny4-0/+54
2025-08-12more simplificationsFranck Cuny2-53/+56
2025-08-12move secrets to their own files and delete unused profileFranck Cuny2-14/+20
2025-08-12move profile for home-manager under programsFranck Cuny1-1/+1
2025-08-12profiles for doc, fish, and remove unused profilesFranck Cuny1-1/+3
2025-08-12add profiles for security, firewalls, and usersFranck Cuny1-0/+3
2025-08-12add a profile for bootFranck Cuny1-0/+1
2025-08-12use podman for containers on nixosFranck Cuny1-0/+1
2025-08-12add profile for motdFranck Cuny1-0/+1
2025-08-12create profiles for networkd and nix's GCFranck Cuny1-1/+2
2025-08-12move disks configuration to the host' directoryFranck Cuny2-2/+56
2025-08-12profile for toolsFranck Cuny1-0/+1
2025-08-12profile for sshdFranck Cuny1-0/+1
2025-08-12import localeFranck Cuny1-0/+1
2025-08-12move each machine configuration to a folderFranck Cuny1-0/+119
This will give me a bit more flexibility to configure things per machine in the future.