| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 17 hours | move videos and music under /data/mediaHEADmain | Franck Cuny | 1 | -2/+1 | |
| 17 hours | backup videos to NAS | Franck Cuny | 1 | -1/+2 | |
| 4 days | backup music | Franck Cuny | 1 | -1/+4 | |
| 7 days | add a module to remotely unlock machines | Franck Cuny | 1 | -0/+12 | |
| For machines with full disk encryption, we can remotely unlock them from bree. A systemd timer will run every 10 minutes and check if we need to unlock the host. If we need to, it will SSH and provide the passphrase to unlock the disk(s). | |||||
| 8 days | add a profile for wireguard configuration | Franck Cuny | 3 | -108/+5 | |
| 8 days | the VM on the synology was reinstalled | Franck Cuny | 4 | -7/+23 | |
| All the secrets were re-keyed. | |||||
| 9 days | backup to the synology nas | Franck Cuny | 1 | -0/+3 | |
| In addition to do a local backup, we also backup to the synology nas. We don't configure what to backup in the profiles, but instead in the host configuration. | |||||
| 9 days | rename synology-vm to bree | Franck Cuny | 2 | -41/+8 | |
| 13 days | move reverse proxy configuration to a profile | Franck Cuny | 1 | -82/+1 | |
| 13 days | configure miniflux and integrate with authelia | Franck Cuny | 2 | -0/+7 | |
| 14 days | adding webfinger support | Franck Cuny | 1 | -0/+37 | |
| 14 days | initial setup for authelia | Franck Cuny | 2 | -1/+10 | |
| 14 days | delete do-rproxy | Franck Cuny | 1 | -85/+0 | |
| This machine is replaced by argonath | |||||
| 14 days | configure the reverse proxy on argonath | Franck Cuny | 1 | -0/+32 | |
| 2025-11-21 | wireguard configuration for argonath | Franck Cuny | 2 | -2/+36 | |
| 2025-11-21 | add new host: argonath | Franck Cuny | 1 | -0/+26 | |
| 2025-11-20 | move acme configurations to a profile | Franck Cuny | 1 | -29/+2 | |
| Clean up API keys for Cloudflare. | |||||
| 2025-11-16 | run my website from rivendell | Franck Cuny | 3 | -117/+26 | |
| 2025-11-15 | delete profiles for forgejo and keycloak | Franck Cuny | 1 | -2/+0 | |
| 2025-11-15 | simplify the backups | Franck Cuny | 2 | -21/+1 | |
| 2025-11-10 | configure the reverse proxy for cgit | Franck Cuny | 2 | -8/+2 | |
| 2025-11-09 | re-use gitolite as a git server | Franck Cuny | 1 | -0/+1 | |
| 2025-11-09 | remove tailscale configuration | Franck Cuny | 1 | -15/+0 | |
| 2025-11-02 | cleanup nixos related configurations | Franck Cuny | 3 | -58/+21 | |
| 2025-11-02 | simplify configuration for darwin | Franck Cuny | 3 | -0/+26 | |
| 2025-10-24 | move remote-unlock as a profile | Franck Cuny | 1 | -3/+3 | |
| 2025-10-24 | configure rivendell to be an exit node for tailscale | Franck Cuny | 1 | -0/+14 | |
| 2025-10-24 | simplify hosts management | Franck Cuny | 11 | -235/+109 | |
| 2025-10-23 | move a few more things back as profiles | Franck Cuny | 3 | -0/+9 | |
| 2025-10-23 | enable tailscale on 2 machines | Franck Cuny | 1 | -0/+1 | |
| 2025-10-23 | webfinger setup to support tailscale | Franck Cuny | 1 | -43/+94 | |
| Based on https://tailscale.com/kb/1240/sso-custom-oidc and https://github.com/randomnetcat/nix-configs/blob/f1963827395d6c82a7e64267fde9b0c82da02380/hosts/bear/auth/default.nix#L134 | |||||
| 2025-10-18 | move keycloak and forgejo on rivendell | Franck Cuny | 6 | -137/+7 | |
| I had to rekey all the secrets. Updated the documentation for both how to setup forgejo and keycloak. | |||||
| 2025-10-18 | configure wireguard for rivendell | Franck Cuny | 3 | -0/+41 | |
| 2025-10-18 | move the disk configuration for rivendell as a profile | Franck Cuny | 2 | -68/+1 | |
| 2025-10-13 | introduce a module for baremetal machines | Franck Cuny | 1 | -5/+1 | |
| 2025-10-13 | introduce a module for digital ocean droplet | Franck Cuny | 2 | -71/+3 | |
| 2025-10-13 | consistent home-manager configuration for all nixos hosts | Franck Cuny | 6 | -44/+0 | |
| 2025-10-12 | make the remote unlock bits a nix module | Franck Cuny | 2 | -59/+24 | |
| Move all the hardware configuration for rivendell into the default.nix. | |||||
| 2025-10-12 | initial setup for the framework destkop (named rivendell) | Franck Cuny | 5 | -0/+194 | |
| 2025-10-09 | configure podman for all nixos machines | Franck Cuny | 2 | -4/+0 | |
| 2025-10-09 | import home-manager.nix and user.nix by default on nixos | Franck Cuny | 2 | -4/+0 | |
| 2025-10-09 | automatically import home-manager.nix for all hosts | Franck Cuny | 2 | -2/+0 | |
| 2025-10-09 | more simplification of the configuration | Franck Cuny | 2 | -5/+0 | |
| 2025-10-09 | move common modules under modules/ | Franck Cuny | 2 | -2/+0 | |
| Simplify the import on the various hosts. | |||||
| 2025-10-06 | nix configuration is applied by default to nixos machines | Franck Cuny | 2 | -4/+0 | |
| 2025-09-12 | start to refactor nixos modules | Franck Cuny | 2 | -2/+0 | |
| 2025-09-08 | Revert "move droplet specific settings to its own module" | Franck Cuny | 2 | -3/+61 | |
| This reverts commit 3b47113c28c5180d4d5d710e3c1fe74f95aa7226. | |||||
| 2025-09-08 | move droplet specific settings to its own module | Franck Cuny | 2 | -61/+3 | |
| 2025-09-07 | move deployment bits to colmena declaration | Franck Cuny | 2 | -14/+0 | |
| 2025-09-07 | the resume is in HTML | Franck Cuny | 1 | -2/+0 | |
| 2025-09-06 | run my personal website on the droplet | Franck Cuny | 1 | -1/+28 | |
| 2025-09-01 | initial attempt at using colmena to deploy nixos configurations | Franck Cuny | 2 | -0/+14 | |
| Can be used that way: ``` colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx' ``` or ``` colmena --impure apply dry-activate --on synology-vm ``` | |||||
| 2025-08-30 | switch to nginx | Franck Cuny | 4 | -75/+76 | |
| For some reasons, I can't get compression to work with Caddy, and I don't get much benefit from it in the first place anyway. | |||||
| 2025-08-24 | run `goget` on `go.fcuny.net` | Franck Cuny | 3 | -0/+22 | |
| 2025-08-24 | open firewall ports for forgejo and keycloak | Franck Cuny | 2 | -0/+4 | |
| 2025-08-20 | initial configuration for fail2ban | Franck Cuny | 1 | -0/+1 | |
| We need to ensure the firewall is enabled and let's ensure that we open the port for SSH. | |||||
| 2025-08-17 | add a wrapper for forgejo admin commands | Franck Cuny | 1 | -1/+14 | |
| 2025-08-17 | enable forgejo dump | Franck Cuny | 1 | -0/+3 | |
| 2025-08-17 | create a new systemd slice for critical services | Franck Cuny | 2 | -16/+2 | |
| 2025-08-14 | add keycloak for OAuth, runbooks, and finish forgejo setup | Franck Cuny | 5 | -44/+105 | |
| 2025-08-12 | initial setup for forgejo and caddy | Franck Cuny | 7 | -6/+78 | |
| 2025-08-12 | more simplifications | Franck Cuny | 2 | -53/+56 | |
| 2025-08-12 | move secrets to their own files and delete unused profile | Franck Cuny | 5 | -45/+62 | |
| 2025-08-12 | move profile for home-manager under programs | Franck Cuny | 2 | -2/+2 | |
| 2025-08-12 | profiles for doc, fish, and remove unused profiles | Franck Cuny | 2 | -2/+6 | |
| 2025-08-12 | move git server profile closer to host config | Franck Cuny | 2 | -1/+41 | |
| 2025-08-12 | move hardware config closer to the host config | Franck Cuny | 2 | -1/+24 | |
| 2025-08-12 | add profiles for security, firewalls, and users | Franck Cuny | 2 | -0/+6 | |
| 2025-08-12 | add a profile for boot | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | use podman for containers on nixos | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | add profile for motd | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | create profiles for networkd and nix's GC | Franck Cuny | 2 | -2/+4 | |
| 2025-08-12 | move disks configuration to the host' directory | Franck Cuny | 4 | -2/+112 | |
| 2025-08-12 | profile for tools | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | profile for sshd | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | import locale | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | move each machine configuration to a folder | Franck Cuny | 2 | -0/+0 | |
| This will give me a bit more flexibility to configure things per machine in the future. | |||||
| 2025-08-12 | users -> home | Franck Cuny | 2 | -2/+2 | |
| 2025-08-10 | setup wireguard tunnel between the VM and DO hosts | Franck Cuny | 2 | -0/+31 | |
| 2025-08-10 | manage a DigitalOcean virtual machine with nixos | Franck Cuny | 2 | -14/+115 | |
| Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time. | |||||
| 2025-08-09 | add the SSH key for the remote builder | Franck Cuny | 1 | -0/+3 | |
| All the secrets were rekeyed. | |||||
| 2025-08-03 | absolute path for loading minimal profile | Franck Cuny | 1 | -1/+1 | |
| 2025-08-03 | attempt at configuring the remote builder on the VM | Franck Cuny | 1 | -0/+10 | |
| 2025-07-25 | add a module for backups | Franck Cuny | 1 | -0/+9 | |
| Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket. | |||||
| 2025-07-25 | add a module for mounting CIFS volumes | Franck Cuny | 1 | -0/+15 | |
| The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM. | |||||
| 2025-07-25 | enable cloudflared on the vm | Franck Cuny | 1 | -0/+15 | |
| 2025-07-21 | keep organizing into modules and profiles | Franck Cuny | 1 | -26/+4 | |
| 2025-07-21 | move all profiles, modules, and flakes to top-level | Franck Cuny | 1 | -4/+4 | |
| 2025-07-21 | install minimal home-manager profile on the VM | Franck Cuny | 1 | -1/+15 | |
| 2025-07-21 | move machines definitions to top-level | Franck Cuny | 1 | -0/+53 | |
 |
index : infra | |
| nix configuration for my machines | Gitolite user |
| aboutsummaryrefslogtreecommitdiff |