infra - nix configuration for my machines

	Commit message (Collapse)	Author	Age	Files	Lines
*	add keycloak for OAuth, runbooks, and finish forgejo setup	Franck Cuny	2025-08-14	5	-44/+105
\|
*	initial setup for forgejo and caddy	Franck Cuny	2025-08-12	7	-6/+78
\|
*	more simplifications	Franck Cuny	2025-08-12	2	-53/+56
\|
*	move secrets to their own files and delete unused profile	Franck Cuny	2025-08-12	5	-45/+62
\|
*	move profile for home-manager under programs	Franck Cuny	2025-08-12	2	-2/+2
\|
*	profiles for doc, fish, and remove unused profiles	Franck Cuny	2025-08-12	2	-2/+6
\|
*	move git server profile closer to host config	Franck Cuny	2025-08-12	2	-1/+41
\|
*	move hardware config closer to the host config	Franck Cuny	2025-08-12	2	-1/+24
\|
*	add profiles for security, firewalls, and users	Franck Cuny	2025-08-12	2	-0/+6
\|
*	add a profile for boot	Franck Cuny	2025-08-12	2	-0/+2
\|
*	use podman for containers on nixos	Franck Cuny	2025-08-12	2	-0/+2
\|
*	add profile for motd	Franck Cuny	2025-08-12	2	-0/+2
\|
*	create profiles for networkd and nix's GC	Franck Cuny	2025-08-12	2	-2/+4
\|
*	move disks configuration to the host' directory	Franck Cuny	2025-08-12	4	-2/+112
\|
*	profile for tools	Franck Cuny	2025-08-12	2	-0/+2
\|
*	profile for sshd	Franck Cuny	2025-08-12	2	-0/+2
\|
*	import locale	Franck Cuny	2025-08-12	2	-0/+2
\|
*	move each machine configuration to a folder	Franck Cuny	2025-08-12	2	-0/+0
\| \| \| \| \|	This will give me a bit more flexibility to configure things per machine in the future.
*	users -> home	Franck Cuny	2025-08-12	2	-2/+2
\|
*	setup wireguard tunnel between the VM and DO hosts	Franck Cuny	2025-08-10	2	-0/+31
\|
*	manage a DigitalOcean virtual machine with nixos	Franck Cuny	2025-08-10	2	-14/+115
\| \| \| \| \| \| \|	Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time.
*	add the SSH key for the remote builder	Franck Cuny	2025-08-09	1	-0/+3
\| \| \| \|	All the secrets were rekeyed.
*	absolute path for loading minimal profile	Franck Cuny	2025-08-03	1	-1/+1
\|
*	attempt at configuring the remote builder on the VM	Franck Cuny	2025-08-03	1	-0/+10
\|
*	add a module for backups	Franck Cuny	2025-07-25	1	-0/+9
\| \| \| \| \|	Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket.
*	add a module for mounting CIFS volumes	Franck Cuny	2025-07-25	1	-0/+15
\| \| \| \| \| \| \| \| \| \|	The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM.
*	enable cloudflared on the vm	Franck Cuny	2025-07-25	1	-0/+15
\|
*	keep organizing into modules and profiles	Franck Cuny	2025-07-21	1	-26/+4
\|
*	move all profiles, modules, and flakes to top-level	Franck Cuny	2025-07-21	1	-4/+4
\|
*	install minimal home-manager profile on the VM	Franck Cuny	2025-07-21	1	-1/+15
\|
*	move machines definitions to top-level	Franck Cuny	2025-07-21	1	-0/+53