| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2025-10-23 | webfinger setup to support tailscale | Franck Cuny | 1 | -43/+94 | |
| Based on https://tailscale.com/kb/1240/sso-custom-oidc and https://github.com/randomnetcat/nix-configs/blob/f1963827395d6c82a7e64267fde9b0c82da02380/hosts/bear/auth/default.nix#L134 | |||||
| 2025-10-23 | simplify darwin configuration | Franck Cuny | 5 | -62/+34 | |
| Remove a bunch of files and consolidate everything into the host's file. | |||||
| 2025-10-18 | move keycloak and forgejo on rivendell | Franck Cuny | 6 | -137/+7 | |
| I had to rekey all the secrets. Updated the documentation for both how to setup forgejo and keycloak. | |||||
| 2025-10-18 | configure wireguard for rivendell | Franck Cuny | 3 | -0/+41 | |
| 2025-10-18 | move the disk configuration for rivendell as a profile | Franck Cuny | 2 | -68/+1 | |
| 2025-10-13 | introduce a module for baremetal machines | Franck Cuny | 1 | -5/+1 | |
| 2025-10-13 | introduce a module for digital ocean droplet | Franck Cuny | 2 | -71/+3 | |
| 2025-10-13 | consistent home-manager configuration for all nixos hosts | Franck Cuny | 6 | -44/+0 | |
| 2025-10-12 | make the remote unlock bits a nix module | Franck Cuny | 2 | -59/+24 | |
| Move all the hardware configuration for rivendell into the default.nix. | |||||
| 2025-10-12 | initial setup for the framework destkop (named rivendell) | Franck Cuny | 5 | -0/+194 | |
| 2025-10-09 | configure podman for all nixos machines | Franck Cuny | 2 | -4/+0 | |
| 2025-10-09 | import home-manager.nix and user.nix by default on nixos | Franck Cuny | 2 | -4/+0 | |
| 2025-10-09 | automatically import home-manager.nix for all hosts | Franck Cuny | 4 | -5/+0 | |
| 2025-10-09 | don't import fonts.nix | Franck Cuny | 1 | -1/+0 | |
| This has been merged in the desktop.nix module. | |||||
| 2025-10-09 | more simplification of the configuration | Franck Cuny | 2 | -5/+0 | |
| 2025-10-09 | move common modules under modules/ | Franck Cuny | 4 | -15/+0 | |
| Simplify the import on the various hosts. | |||||
| 2025-10-06 | nix configuration is applied by default to nixos machines | Franck Cuny | 2 | -4/+0 | |
| 2025-09-12 | start to refactor nixos modules | Franck Cuny | 2 | -2/+0 | |
| 2025-09-08 | Revert "move droplet specific settings to its own module" | Franck Cuny | 2 | -3/+61 | |
| This reverts commit 3b47113c28c5180d4d5d710e3c1fe74f95aa7226. | |||||
| 2025-09-08 | move droplet specific settings to its own module | Franck Cuny | 2 | -61/+3 | |
| 2025-09-07 | move deployment bits to colmena declaration | Franck Cuny | 2 | -14/+0 | |
| 2025-09-07 | the resume is in HTML | Franck Cuny | 1 | -2/+0 | |
| 2025-09-06 | run my personal website on the droplet | Franck Cuny | 1 | -1/+28 | |
| 2025-09-01 | initial attempt at using colmena to deploy nixos configurations | Franck Cuny | 2 | -0/+14 | |
| Can be used that way: ``` colmena exec --impure -v --on do-rproxy -- 'systemctl status nginx' ``` or ``` colmena --impure apply dry-activate --on synology-vm ``` | |||||
| 2025-08-30 | switch to nginx | Franck Cuny | 4 | -75/+76 | |
| For some reasons, I can't get compression to work with Caddy, and I don't get much benefit from it in the first place anyway. | |||||
| 2025-08-24 | run `goget` on `go.fcuny.net` | Franck Cuny | 3 | -0/+22 | |
| 2025-08-24 | open firewall ports for forgejo and keycloak | Franck Cuny | 2 | -0/+4 | |
| 2025-08-20 | initial configuration for fail2ban | Franck Cuny | 1 | -0/+1 | |
| We need to ensure the firewall is enabled and let's ensure that we open the port for SSH. | |||||
| 2025-08-17 | add a wrapper for forgejo admin commands | Franck Cuny | 1 | -1/+14 | |
| 2025-08-17 | enable forgejo dump | Franck Cuny | 1 | -0/+3 | |
| 2025-08-17 | create a new systemd slice for critical services | Franck Cuny | 2 | -16/+2 | |
| 2025-08-14 | add keycloak for OAuth, runbooks, and finish forgejo setup | Franck Cuny | 5 | -44/+105 | |
| 2025-08-12 | initial setup for forgejo and caddy | Franck Cuny | 7 | -6/+78 | |
| 2025-08-12 | more simplifications | Franck Cuny | 7 | -109/+111 | |
| 2025-08-12 | move secrets to their own files and delete unused profile | Franck Cuny | 5 | -45/+62 | |
| 2025-08-12 | move profile for home-manager under programs | Franck Cuny | 4 | -4/+4 | |
| 2025-08-12 | profiles for darwin | Franck Cuny | 2 | -2/+6 | |
| 2025-08-12 | profiles for doc, fish, and remove unused profiles | Franck Cuny | 2 | -2/+6 | |
| 2025-08-12 | add a profile for fonts | Franck Cuny | 2 | -8/+2 | |
| 2025-08-12 | move git server profile closer to host config | Franck Cuny | 2 | -1/+41 | |
| 2025-08-12 | move hardware config closer to the host config | Franck Cuny | 2 | -1/+24 | |
| 2025-08-12 | add profiles for darwin and remote builder | Franck Cuny | 2 | -1/+3 | |
| 2025-08-12 | add profiles for security, firewalls, and users | Franck Cuny | 2 | -0/+6 | |
| 2025-08-12 | add a profile for boot | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | use podman for containers on nixos | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | add profile for motd | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | create profiles for networkd and nix's GC | Franck Cuny | 2 | -2/+4 | |
| 2025-08-12 | move disks configuration to the host' directory | Franck Cuny | 4 | -2/+112 | |
| 2025-08-12 | profile for tools | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | profile for sshd | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | import locale | Franck Cuny | 2 | -0/+2 | |
| 2025-08-12 | move each machine configuration to a folder | Franck Cuny | 4 | -0/+0 | |
| This will give me a bit more flexibility to configure things per machine in the future. | |||||
| 2025-08-12 | users -> home | Franck Cuny | 4 | -6/+6 | |
| 2025-08-10 | setup wireguard tunnel between the VM and DO hosts | Franck Cuny | 2 | -0/+31 | |
| 2025-08-10 | manage a DigitalOcean virtual machine with nixos | Franck Cuny | 2 | -14/+115 | |
| Add a new machine on DigitalOcean and provision it using terraform + nixos-anywhere. This takes care of bringing the machine up on nixos completely, and use a static SSH host key in order to configure wireguard at the same time. | |||||
| 2025-08-09 | add the SSH key for the remote builder | Franck Cuny | 2 | -0/+12 | |
| All the secrets were rekeyed. | |||||
| 2025-08-03 | absolute path for loading minimal profile | Franck Cuny | 1 | -1/+1 | |
| 2025-08-03 | attempt at configuring the remote builder on the VM | Franck Cuny | 2 | -0/+11 | |
| 2025-07-25 | add a module for backups | Franck Cuny | 1 | -0/+9 | |
| Enable the module on the VM, and backup the git repositories both to the NAS and to a GCS bucket. | |||||
| 2025-07-25 | add a module for mounting CIFS volumes | Franck Cuny | 1 | -0/+15 | |
| The new module is for NAS clients, where we specify the server and the paths to mount locally. We add a new secret to have the username of the `nas' user. We mount the backups volume from the NAS under `/data/backups` on the VM. | |||||
| 2025-07-25 | enable cloudflared on the vm | Franck Cuny | 1 | -0/+15 | |
| 2025-07-24 | fix configuration for work machine | Franck Cuny | 1 | -3/+0 | |
| The hostname is capitalized so let's also capitalize the filename! The overlays are not under `customPackages` anymore. | |||||
| 2025-07-21 | keep organizing into modules and profiles | Franck Cuny | 3 | -29/+4 | |
| 2025-07-21 | move all profiles, modules, and flakes to top-level | Franck Cuny | 3 | -10/+10 | |
| 2025-07-21 | move user configurations to top-level | Franck Cuny | 2 | -4/+4 | |
| 2025-07-21 | install minimal home-manager profile on the VM | Franck Cuny | 1 | -1/+15 | |
| 2025-07-21 | move machines definitions to top-level | Franck Cuny | 3 | -0/+179 | |
 |
index : infra | |
| nix configuration for my machines | Gitolite user |
| aboutsummaryrefslogtreecommitdiff |