Commit Graph

1030 Commits

Author SHA1 Message Date
55547bddc7 hosts/ni: update LDAP-related settings
- Add OpenLDAP to the system packages.

- Fix the file permission for the LDAP password secret.
2023-01-18 11:10:11 +08:00
cfc99cef4c users/plover: add inetutils and iputils to package list 2023-01-17 21:50:00 +08:00
effdc8d927 hosts/plover: refactor secrets owner 2023-01-17 21:34:54 +08:00
58d5c8c15c secrets/backup-archive: update borg remote-backup patterns 2023-01-17 21:34:54 +08:00
92c69f9161 flake.nix: update flake inputs
- Added stable branch for nixpkgs. This is for the preparation of
  facilitating creating hosts that is more maintainable with stable
  branches (like servers, for example).

- Update nixpkgs URL for Neovim overlay. The workaround is based from
  the following link at
  https://github.com/nix-community/neovim-nightly-overlay/issues/164#issuecomment-1377562202
2023-01-17 21:34:54 +08:00
093271368f themes/a-happy-gnome: update "Burn my Windows" settings
I'm a sucker for these subtle window effects.
2023-01-17 21:34:54 +08:00
00f5c34a92 docs: update the READMEs 2023-01-17 21:34:54 +08:00
df6e209723 profiles/dev: add more applications to shell submodule 2023-01-17 21:34:54 +08:00
6bf2642ffc hosts: add Wireguard services to related peers
Among other things, Plover now ignores certain IP for fail2ban. This is
for the VPN users that are placed in that range.
2023-01-17 21:34:54 +08:00
c3a5778d3f hosts/ni: convert to systemd-networkd for network config
I thought it is pretty neat. Also, I've created a bond interface for the
network devices.
2023-01-17 21:33:20 +08:00
333adf0ce6 hosts/plover: update Gitea Asciidoctor markup to be embedded 2023-01-17 16:09:28 +08:00
002b65250c hosts/plover: add default server to reverse proxy 2023-01-17 16:09:28 +08:00
6d9c43bafa hosts/plover: initialize OpenVPN service 2023-01-17 16:09:28 +08:00
8e07223c97 hosts/plover: move into systemd-networkd for network setup 2023-01-17 16:09:28 +08:00
708ed8137c flake.lock: update inputs
Flake lock file updates:

• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/fcce0d8df02b4657ed413cf9991a0d81852569de' (2023-01-06)
  → 'github:nix-community/emacs-overlay/3f8a6e839a1574631e135a34c53e5e58ae81bd8e' (2023-01-15)
• Updated input 'helix-editor':
    'github:helix-editor/helix/0dbee9590baed10bef3c6c32420b8a5802204657' (2023-01-03)
  → 'github:helix-editor/helix/b6331394a3f341ad21f8fad3e6e0b93becda9ce5' (2023-01-13)
• Updated input 'home-manager':
    'github:nix-community/home-manager/3ecd5305a41b6dd87f6cdf8cfe83ac07bdc47a0f' (2023-01-05)
  → 'github:nix-community/home-manager/2827b5306462d91edec16a3d069b2d6e54c3079f' (2023-01-14)
• Updated input 'neovim-nightly-overlay':
    'github:nix-community/neovim-nightly-overlay/eec74e8a886540dd44ac6564fbbafef88649d514' (2023-01-05)
  → 'github:nix-community/neovim-nightly-overlay/fd8e5953cfeada345d7daeedce6ab0919f1284d4' (2023-01-15)
• Updated input 'neovim-nightly-overlay/neovim-flake':
    'github:neovim/neovim/ae64772a88125153a438a0e9e43d5f6bcb4eeb28?dir=contrib' (2023-01-04)
  → 'github:neovim/neovim/6134c1e8a39a5e61d0593613343a5923a86e3545?dir=contrib' (2023-01-15)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/9813adc7f7c0edd738c6bdd8431439688bb0cb3d' (2023-01-04)
  → 'github:NixOS/nixpkgs/befc83905c965adfd33e5cae49acb0351f6e0404' (2023-01-13)
• Updated input 'nur':
    'github:nix-community/NUR/f26476709bd7b81c6baaa92630fa9793f047f595' (2023-01-06)
  → 'github:nix-community/NUR/0d9214b8db66df7d3dac2725abb891d80938e921' (2023-01-15)
• Updated input 'rust-overlay':
    'github:oxalica/rust-overlay/9096306d4a1c3adcc8d20f2c9dcaee3dee30d1ad' (2023-01-06)
  → 'github:oxalica/rust-overlay/aab6eb2dfc7a1e42d94b6f24ef13639ff8544af4' (2023-01-15)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/b35586cc5abacd4eba9ead138b53e2a60920f781' (2023-01-01)
  → 'github:Mic92/sops-nix/e18eefd2b133a58309475298052c341c08470717' (2023-01-15)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/feda52be1d59f13b9aa02f064b4f14784b9a06c8' (2022-12-31)
  → 'github:NixOS/nixpkgs/7c65528c3f8462b902e09d1ccca23bb9034665c2' (2023-01-15)
2023-01-15 17:10:34 +08:00
ca2d818411 docs: add section for things should be absent in the project README 2023-01-15 14:39:44 +08:00
83aaea863e gnome-shell-extension-burn-my-windows: 21 -> 24 2023-01-15 14:39:44 +08:00
2e466e4561 hosts/plover: move hardware config to be hosting provider-specific 2023-01-15 14:39:44 +08:00
62d220eb2d docs: add deploying firewall and networking on Plover README 2023-01-15 14:39:44 +08:00
5341024d96 hosts/plover: update comments and systemd journal matches for fail2ban 2023-01-15 14:39:44 +08:00
7de5c14ef5 hosts/plover: move hcloud-related files into a dedicated folder 2023-01-15 14:39:44 +08:00
2f34656ee7 ci: separate checking outputs from building them 2023-01-15 14:39:44 +08:00
6fe30acf2b hosts/plover: fix formatting of files 2023-01-15 14:39:44 +08:00
02cfaaf362 hosts/plover: modularize PostgreSQL service 2023-01-15 14:39:44 +08:00
a3602f79e4 docs: update project README 2023-01-12 23:00:06 +08:00
8bd05bf2a3 hosts/plover: modularize config 2023-01-12 22:37:52 +08:00
14a6a94d8f docs: update README for Plover 2023-01-12 22:03:03 +08:00
f3b3666c67 hosts/plover: update gitea-dump pre-start script 2023-01-12 22:03:03 +08:00
98e452c047 hosts/plover: add Portunus seed
This is for defining users and groups. Pretty handy feature.
2023-01-12 22:03:03 +08:00
d9e4dbcb52 hosts/plover: update fail2ban configuration 2023-01-12 22:03:03 +08:00
a00c58b9dc users/foo-dogsquared: update beets and Brave configuration 2023-01-12 22:03:03 +08:00
c63ae20e35 secrets/backup-archive: update structure 2023-01-12 22:03:03 +08:00
b237755736 profiles/server: update config 2023-01-12 22:03:03 +08:00
be405897a6 profiles/server: add tmux 2023-01-12 22:03:03 +08:00
e7bcce4ef6 tasks/backup-archive: assign different passwords for different repos 2023-01-11 13:16:02 +08:00
10fe6c33af hosts/plover: update Gitea home template 2023-01-10 12:13:51 +08:00
b6071b0e0e tasks/backup-archive: update job name for remote backup 2023-01-09 13:57:46 +08:00
a8b66b67ea hosts/plover: update Gitea logo 2023-01-09 13:12:32 +08:00
7dc523903c hosts/plover: create separate passwords for different repos 2023-01-07 17:19:45 +08:00
da827c6e30 tasks/backup-archive: update repo path and repo password 2023-01-07 16:59:17 +08:00
d9908d2d8c hosts/plover: fix the borg jobs function 2023-01-07 16:58:47 +08:00
4c34a87366 chore: reformat codebase 2023-01-07 16:06:34 +08:00
d9e7f7c67e hosts/plover: add the dedicated borg SSH public key 2023-01-07 14:43:07 +08:00
90b8e3ef87 secrets: update backup-archive 2023-01-07 11:52:31 +08:00
c9182102be hosts/plover: separate borg repos for different jobs
Makes it easier to manage them repos.
2023-01-07 11:39:20 +08:00
85e1914025 config: replace Borgbase with Hetzner storage box for Borg repos 2023-01-07 10:52:31 +08:00
e9aa875c6a hosts/plover: fix hcloud user data 2023-01-07 10:52:30 +08:00
90177118b0 hosts/plover: use nftables as firewall 2023-01-07 10:52:30 +08:00
e90a719ca8 hosts/plover: update hardware config according to Hetzner Cloud defaults 2023-01-07 10:52:30 +08:00
533995eb09 docs: update various READMEs 2023-01-07 10:52:30 +08:00