infra - nix configuration for my machines

	Commit message (Collapse)	Author	Files	Lines
2023-05-09	profiles/nginx: move common configuration to a profile	Franck Cuny	1	-0/+11
	Both tahoe and carmel are using nginx, and we can simplify the configuration by moving common parts to the profile and have these hosts import it.
2023-05-08	profile/acme: default DNS provider is gandi	Franck Cuny	1	-8/+3
	Add the API key for gandi to the secrest, create a profile for acme with my defaults. The profile is loaded by tahoe since that's where our services are running on. Update all the servers in nginx to listen on their wireguard interface.
2023-04-23	modules/monitoring: set the host's name as a label for promtail	Franck Cuny	1	-2/+2

2023-04-23	hosts/tahoe: loki and prometheus listen only on the wg0 interface	Franck Cuny	3	-7/+33
	I don't want to have to deal with authentication and TLS certificates for these endpoints. If they are only listening on the wireguard interface I can trust that only authorized hosts are sending traffic to these endpoints. I trust what's running on these machines.
2023-04-23	modules/monitoring: consolidate all monitoring services together	Franck Cuny	7	-0/+14539
	This will help to organize and structure monitoring modules a bit better.