infra - nix configuration for my machines

	Commit message (Collapse)	Author	Files	Lines
2025-08-24	run `goget` on `go.fcuny.net`	Franck Cuny	3	-0/+22

2025-08-24	open firewall ports for forgejo and keycloak	Franck Cuny	2	-0/+4

2025-08-20	initial configuration for fail2ban	Franck Cuny	1	-0/+1
	We need to ensure the firewall is enabled and let's ensure that we open the port for SSH.
2025-08-17	add a wrapper for forgejo admin commands	Franck Cuny	1	-1/+14

2025-08-17	enable forgejo dump	Franck Cuny	1	-0/+3

2025-08-17	create a new systemd slice for critical services	Franck Cuny	2	-16/+2

2025-08-14	add keycloak for OAuth, runbooks, and finish forgejo setup	Franck Cuny	5	-44/+105

2025-08-12	initial setup for forgejo and caddy	Franck Cuny	7	-6/+78

2025-08-12	more simplifications	Franck Cuny	2	-53/+56

2025-08-12	move secrets to their own files and delete unused profile	Franck Cuny	5	-45/+62

2025-08-12	move profile for home-manager under programs	Franck Cuny	2	-2/+2

2025-08-12	profiles for doc, fish, and remove unused profiles	Franck Cuny	2	-2/+6

2025-08-12	move git server profile closer to host config	Franck Cuny	2	-1/+41

2025-08-12	move hardware config closer to the host config	Franck Cuny	2	-1/+24

2025-08-12	add profiles for security, firewalls, and users	Franck Cuny	2	-0/+6

2025-08-12	add a profile for boot	Franck Cuny	2	-0/+2

2025-08-12	use podman for containers on nixos	Franck Cuny	2	-0/+2

2025-08-12	add profile for motd	Franck Cuny	2	-0/+2

2025-08-12	create profiles for networkd and nix's GC	Franck Cuny	2	-2/+4

2025-08-12	move disks configuration to the host' directory	Franck Cuny	4	-2/+112

2025-08-12	profile for tools	Franck Cuny	2	-0/+2

2025-08-12	profile for sshd	Franck Cuny	2	-0/+2

2025-08-12	import locale	Franck Cuny	2	-0/+2

2025-08-12	move each machine configuration to a folder	Franck Cuny	2	-0/+0
	This will give me a bit more flexibility to configure things per machine in the future.
2025-08-12	users -> home	Franck Cuny	2	-2/+2

2025-08-10	setup wireguard tunnel between the VM and DO hosts	Franck Cuny	2	-0/+31

2025-08-10	manage a DigitalOcean virtual machine with nixos	Franck Cuny	2	-14/+115
	Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time.
2025-08-09	add the SSH key for the remote builder	Franck Cuny	1	-0/+3
	All the secrets were rekeyed.
2025-08-03	absolute path for loading minimal profile	Franck Cuny	1	-1/+1

2025-08-03	attempt at configuring the remote builder on the VM	Franck Cuny	1	-0/+10

2025-07-25	add a module for backups	Franck Cuny	1	-0/+9
	Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket.
2025-07-25	add a module for mounting CIFS volumes	Franck Cuny	1	-0/+15
	The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM.
2025-07-25	enable cloudflared on the vm	Franck Cuny	1	-0/+15

2025-07-21	keep organizing into modules and profiles	Franck Cuny	1	-26/+4

2025-07-21	move all profiles, modules, and flakes to top-level	Franck Cuny	1	-4/+4

2025-07-21	install minimal home-manager profile on the VM	Franck Cuny	1	-1/+15

2025-07-21	move machines definitions to top-level	Franck Cuny	1	-0/+53