aboutsummaryrefslogtreecommitdiff
path: root/machines/nixos/x86_64-linux/synology-vm/default.nix (unfollow)
Commit message (Collapse)AuthorFilesLines
2025-10-24simplify hosts managementFranck Cuny1-85/+0
2025-10-23move a few more things back as profilesFranck Cuny1-0/+3
2025-10-18move keycloak and forgejo on rivendellFranck Cuny1-2/+0
I had to rekey all the secrets. Updated the documentation for both how to setup forgejo and keycloak.
2025-10-18configure wireguard for rivendellFranck Cuny1-0/+6
2025-10-13consistent home-manager configuration for all nixos hostsFranck Cuny1-8/+0
2025-10-09configure podman for all nixos machinesFranck Cuny1-2/+0
2025-10-09import home-manager.nix and user.nix by default on nixosFranck Cuny1-2/+0
2025-10-09automatically import home-manager.nix for all hostsFranck Cuny1-1/+0
2025-10-09more simplification of the configurationFranck Cuny1-2/+0
2025-10-09move common modules under modules/Franck Cuny1-1/+0
Simplify the import on the various hosts.
2025-10-06nix configuration is applied by default to nixos machinesFranck Cuny1-2/+0
2025-09-12start to refactor nixos modulesFranck Cuny1-1/+0
2025-09-07move deployment bits to colmena declarationFranck Cuny1-7/+0
2025-09-01initial attempt at using colmena to deploy nixos configurationsFranck Cuny1-0/+7
Can be used that way: ``` colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx' ``` or ``` colmena --impure apply dry-activate --on synology-vm ```
2025-08-24run `goget` on `go.fcuny.net`Franck Cuny1-0/+1
2025-08-17create a new systemd slice for critical servicesFranck Cuny1-8/+1
2025-08-14add keycloak for OAuth, runbooks, and finish forgejo setupFranck Cuny1-1/+1
2025-08-12initial setup for forgejo and caddyFranck Cuny1-0/+1
2025-08-12move secrets to their own files and delete unused profileFranck Cuny1-31/+10
2025-08-12move profile for home-manager under programsFranck Cuny1-1/+1
2025-08-12profiles for doc, fish, and remove unused profilesFranck Cuny1-1/+3
2025-08-12move git server profile closer to host configFranck Cuny1-1/+1
2025-08-12move hardware config closer to the host configFranck Cuny1-1/+1
2025-08-12add profiles for security, firewalls, and usersFranck Cuny1-0/+3
2025-08-12add a profile for bootFranck Cuny1-0/+1
2025-08-12use podman for containers on nixosFranck Cuny1-0/+1
2025-08-12add profile for motdFranck Cuny1-0/+1
2025-08-12create profiles for networkd and nix's GCFranck Cuny1-1/+2
2025-08-12move disks configuration to the host' directoryFranck Cuny1-0/+1
2025-08-12profile for toolsFranck Cuny1-0/+1
2025-08-12profile for sshdFranck Cuny1-0/+1
2025-08-12import localeFranck Cuny1-0/+1
2025-08-12move each machine configuration to a folderFranck Cuny1-0/+0
This will give me a bit more flexibility to configure things per machine in the future.
2025-08-12users -> homeFranck Cuny1-1/+1
2025-08-10setup wireguard tunnel between the VM and DO hostsFranck Cuny1-0/+22
2025-08-10manage a DigitalOcean virtual machine with nixosFranck Cuny1-14/+5
Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time.
2025-08-09add the SSH key for the remote builderFranck Cuny1-0/+3
All the secrets were rekeyed.
2025-08-03absolute path for loading minimal profileFranck Cuny1-1/+1
2025-08-03attempt at configuring the remote builder on the VMFranck Cuny1-0/+10
2025-07-25add a module for backupsFranck Cuny1-0/+9
Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket.
2025-07-25add a module for mounting CIFS volumesFranck Cuny1-0/+15
The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM.
2025-07-25enable cloudflared on the vmFranck Cuny1-0/+15
2025-07-21keep organizing into modules and profilesFranck Cuny1-26/+4
2025-07-21move all profiles, modules, and flakes to top-levelFranck Cuny1-4/+4
2025-07-21install minimal home-manager profile on the VMFranck Cuny1-1/+15
2025-07-21move machines definitions to top-levelFranck Cuny1-0/+0
2025-07-21import nix profile in the server profileFranck Cuny1-15/+1
2025-07-21refactoring to use flake-parts and automatic imports of hostsFranck Cuny1-37/+12
This is the first step in a large refactoring to use flake-parts, and to automatically imports hosts based on paths.
2025-07-17build and deploy my personal website on the VMFranck Cuny1-0/+1
2025-07-14create common network configuration for nixosFranck Cuny1-0/+1
2025-07-06add secrets and configurations for cloudflaredFranck Cuny1-0/+7
2025-06-30backup the VM to Google Cloud StorageFranck Cuny1-1/+13
For now we only backup git repositories.
2025-06-30add configuration for vm-synologyFranck Cuny1-0/+71
This is a VM running on the Synology NAS. For now it only run `gitolite`, but we may host additional services in the future.
2025-04-20remove configuration for the VMsFranck Cuny1-13/+0
2024-12-28removed a few services from vm-synologyFranck Cuny1-3/+0
2024-12-19switch to the newer version of nixfmtFranck Cuny1-2/+9
`nixfmt-rfc-style' replaces `nixfmt-classic'. It's actively maintained, but also changes the style, so this commit touches all the files in the repository.
2024-12-16move gitotlite to vm-synologyFranck Cuny1-1/+1
2024-12-15run `ddns-updater' on `vm-synology'Franck Cuny1-1/+1
It has a small UI and the configuration with the secrets is managed with `agenix'.
2024-12-09fix misconfiguration of the bootloaderFranck Cuny1-0/+4
2024-12-09move each machine into a directoryFranck Cuny1-0/+5
it will be easier to break down some configs.