Commit Graph

1623 Commits

Author SHA1 Message Date
2632b75bf2
hosts/plover: properly add nginx upstreams
Even though this is unlikely to be scaled further, we're just being good
sysadmins (or at least roleplaying as one).
2023-10-13 16:48:02 +08:00
7daea6c427
services/vouch-proxy: update service config 2023-10-13 14:24:44 +08:00
025a3b5db4
hosts/plover: update secrets 2023-10-13 14:24:23 +08:00
4587a4165f
config: migrate from Terraform CLI to OpenTofu CLI 2023-10-13 14:24:10 +08:00
79a144aad6
users/foo-dogsquared: add quick script for mpv YouTube playlists 2023-10-13 14:15:46 +08:00
90210fde9c
hosts/plover: add Grafana secrets 2023-10-11 23:17:45 +08:00
8fbdc73478
hosts/plover: update Grafana settings 2023-10-11 13:06:41 +08:00
39bfd2dc65
docs: add FlakeHub reference to project README 2023-10-10 12:37:00 +08:00
3ee04bb812
chore: reformat codebase 2023-10-09 20:48:01 +08:00
7d55e45f70
services/vouch-proxy: add some more hardening options 2023-10-09 20:46:06 +08:00
2dbb3ed68c
services/vouch-proxy: restructure for multiple instances
This resolves some cases where the admin does not have all of their
users within the protected domain and some in others.
2023-10-09 20:43:13 +08:00
4c6a19b3a7
hosts/plover: add secrets for Vouch proxy 2023-10-09 20:26:33 +08:00
46e38d0c96
hosts/plover: update Vouch proxy config 2023-10-09 20:26:11 +08:00
github-actions[bot]
ef639c9d0c flake.lock: update inputs
Flake lock file updates:

• Updated input 'devshell':
    'github:numtide/devshell/05d40d17bf3459606316e3e9ec683b784ff28f16' (2023-09-20)
  → 'github:numtide/devshell/cd4e2fda3150dd2f689caeac07b7f47df5197c31' (2023-09-29)
• Updated input 'disko':
    'github:nix-community/disko/19b62324663b6b9859caf7f335d232cf4f1f6a32' (2023-09-28)
  → 'github:nix-community/disko/3c41ae36ff12afbada9396c7d8282c2c74f74e06' (2023-10-12)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/ef992bca01ef97e8bbd1136693d24665390f39ce' (2023-09-28)
  → 'github:nix-community/emacs-overlay/bd5c5e9a9b460a275df97c7226f573cd88cb27ef' (2023-10-12)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/5cfafa12d57374f48bcc36fda3274ada276cf69e' (2023-09-27)
  → 'github:NixOS/nixpkgs/bd1cde45c77891214131cbbea5b1203e485a9d51' (2023-10-11)
• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/0a64c59216be179aeaf9ed49d6135b7359a7326b?dir=pkgs/firefox-addons' (2023-09-28)
  → 'gitlab:rycee/nur-expressions/0a2aad558c096ea1bbe7db294c3c40fd61db2fa3?dir=pkgs/firefox-addons' (2023-10-12)
• Updated input 'helix-editor':
    'github:helix-editor/helix/77fe8f214b15b8297a9f2f8ed929994559604d6c' (2023-09-28)
  → 'github:helix-editor/helix/574f82130892d4a388bfdcce63fe2c4a190e479e' (2023-10-12)
• Updated input 'home-manager':
    'github:nix-community/home-manager/9d4cdf8cc4da54beb5d2e927af7a259bb4a00645' (2023-09-28)
  → 'github:nix-community/home-manager/6bba64781e4b7c1f91a733583defbd3e46b49408' (2023-10-10)
• Updated input 'home-manager/nixpkgs':
    'github:NixOS/nixpkgs/e35dcc04a3853da485a396bdd332217d0ac9054f' (2023-09-22)
  → 'github:NixOS/nixpkgs/87828a0e03d1418e848d3dd3f3014a632e4a4f64' (2023-10-06)
• Updated input 'neovim-nightly-overlay':
    'github:nix-community/neovim-nightly-overlay/6fb6984f0bf3fcd4fd1c375bf879c15f2770f8aa' (2023-09-29)
  → 'github:nix-community/neovim-nightly-overlay/185a47b09d95c430187a16d89b1ec32391698e07' (2023-10-13)
• Updated input 'neovim-nightly-overlay/flake-compat':
    'github:edolstra/flake-compat/35bb57c0c8d8b62bbfd284272c928ceb64ddbde9' (2023-01-17)
  → 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04)
• Updated input 'neovim-nightly-overlay/flake-parts':
    'github:hercules-ci/flake-parts/7f53fdb7bdc5bb237da7fefef12d099e4fd611ca' (2023-09-01)
  → 'github:hercules-ci/flake-parts/c9afaba3dfa4085dbd2ccb38dfade5141e33d9d4' (2023-10-03)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/91fae5824f5f1199f61693c6590b4a89abaed9d7' (2023-09-25)
  → 'github:hercules-ci/hercules-ci-effects/178b36dc3a75c96efc25477d45eafc37ba1fafc3' (2023-10-11)
• Updated input 'neovim-nightly-overlay/neovim-flake':
    'github:neovim/neovim/b917db062fc673dfbbc6a8c722b05101319ab44e?dir=contrib' (2023-09-28)
  → 'github:neovim/neovim/ebe489d8f0edbb3538a59733289d8969d1ffea22?dir=contrib' (2023-10-12)
• Updated input 'nixos-generators':
    'github:nix-community/nixos-generators/8ee78470029e641cddbd8721496da1316b47d3b4' (2023-09-04)
  → 'github:nix-community/nixos-generators/150f38bd1e09e20987feacb1b0d5991357532fb5' (2023-09-30)
• Updated input 'nixos-stable':
    'github:NixOS/nixpkgs/5cfafa12d57374f48bcc36fda3274ada276cf69e' (2023-09-27)
  → 'github:NixOS/nixpkgs/bd1cde45c77891214131cbbea5b1203e485a9d51' (2023-10-11)
• Updated input 'nixos-unstable':
    'github:NixOS/nixpkgs/8a86b98f0ba1c405358f1b71ff8b5e1d317f5db2' (2023-09-27)
  → 'github:NixOS/nixpkgs/f99e5f03cc0aa231ab5950a15ed02afec45ed51a' (2023-10-09)
• Updated input 'nixos-unstable-small':
    'github:NixOS/nixpkgs/248a83fffc10b627da67fa6b25d2c13fc7542628' (2023-09-28)
  → 'github:NixOS/nixpkgs/4183880e0e56f5a8dc55ef63df0cb64a7d5ea21f' (2023-10-12)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/8a86b98f0ba1c405358f1b71ff8b5e1d317f5db2' (2023-09-27)
  → 'github:NixOS/nixpkgs/f99e5f03cc0aa231ab5950a15ed02afec45ed51a' (2023-10-09)
• Updated input 'nur':
    'github:nix-community/NUR/50363ec39651feb3cb64821107ea9d8e8e186bc6' (2023-09-28)
  → 'github:nix-community/NUR/9652d4b7c5c05d982e69d1c9df8d05010d431ba0' (2023-10-12)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/2f375ed8702b0d8ee2430885059d5e7975e38f78' (2023-09-21)
  → 'github:Mic92/sops-nix/f995ea159252a53b25fa99824f2891e3b479d511' (2023-10-11)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/596611941a74be176b98aeba9328aa9d01b8b322' (2023-09-16)
  → 'github:NixOS/nixpkgs/2f3b6b3fcd9fa0a4e6b544180c058a70890a7cc1' (2023-10-07)
2023-10-13 01:02:14 +00:00
bd478aebc7
profiles/dev: add Dive for virtualization submodule 2023-10-09 22:32:13 +08:00
5152bae032
services/vouch-proxy: add more systemd directives 2023-10-09 22:31:27 +08:00
2397656b7f
hosts/bootstrap: downgrade Linux kernel to 6.1
This is mainly to support zfs which is a likely future for me once I got
my hands on a mini-PC server.
2023-10-09 22:30:25 +08:00
cd93122b07
hosts/plover: enable Kanidm LDAP server 2023-10-09 22:09:33 +08:00
2af2326b16
hosts/plover: update Grafana nginx and secrets config 2023-10-09 22:09:15 +08:00
0830ff0458
hosts/plover: update foodogsquared.one DNS zone 2023-10-08 14:40:57 +08:00
b4b64fa50b
services/vouch-proxy: improve conditional settings file option 2023-10-07 20:42:52 +08:00
8fbbc0ca6d
lib/private: update getUsers implementation 2023-10-08 03:29:38 +08:00
a6fcc6eec6
hosts/plover: update Wezterm mux server config
It's not fully working but we'll get there.
2023-10-08 03:29:06 +08:00
97916aaa05
hosts/plover: init Prometheus monitoring daemon 2023-10-08 03:28:35 +08:00
6ec18948b5
hosts/plover: init Vouch proxy server 2023-10-08 03:28:14 +08:00
0eadf55fd5
hosts/plover: init Grafana server 2023-10-08 03:27:47 +08:00
f489c50aa9
hosts/plover: refactor Gitea config 2023-10-08 03:26:53 +08:00
c35b72352e
hosts/plover: update Bind config generation 2023-10-08 03:26:07 +08:00
069723d38a
services/wezterm-mux-server: hardcode user and group
With DynamicUser directive, it should be easy to make this usable.
2023-10-06 13:48:12 +08:00
86d8878fab
services/vouch-proxy: init 2023-10-07 20:41:14 +08:00
fc5eb2b0e2
hosts/plover: update Wezterm mux server config 2023-10-05 12:27:59 +08:00
12bb71be20
services/wezterm-mux-server: improve code 2023-10-05 10:23:09 +08:00
df58c17524
profiles/editors: add VS Code pre-set settings 2023-10-05 00:06:53 +08:00
61f8457584
hosts/plover: update nginx configuration 2023-10-04 15:53:43 +08:00
ccb05b35ae
hosts/plover: remove unused bindings 2023-10-04 13:29:29 +08:00
24b70bf04a
hosts/plover: change backup schedule to daily 2023-10-04 13:28:43 +08:00
516b6e84d2
lib/private: refactor mapHomeManagerUser 2023-10-03 21:33:16 +08:00
9be7f20438
profiles/desktop: update mpv configuration 2023-10-03 21:32:24 +08:00
5f5dc2a14e
hosts/plover: add kTLS for various services 2023-10-03 15:52:42 +08:00
4c71c61768
hosts/plover: add nginx content caching for select services 2023-10-03 15:50:46 +08:00
9d9d5e240f
config: disable user-dirs generation for homeConfigurations 2023-10-02 18:15:50 +08:00
c410ece05a
treewide: remove options attribute for modules 2023-10-02 14:26:11 +08:00
881cbd6c8e
overlays/blender-foodogsquared: add more Python modules 2023-10-02 14:16:44 +08:00
e321e03204
users/foo-dogsquared: add SSH config for self-hosted setups 2023-10-02 14:15:37 +08:00
d7cc9f412c
hosts/ni: remove Firefox and thermald 2023-09-30 14:02:40 +08:00
98e5f1a9b3
users/foo-dogsquared: remove vscodium-fhs
We already use VS Code for this.
2023-09-30 13:39:31 +08:00
github-actions[bot]
626a92624d flake.lock: update inputs
Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/f43f106e91fe4f6591cf80cc5c8179e841c6e922' (2023-09-20)
  → 'github:nix-community/disko/19b62324663b6b9859caf7f335d232cf4f1f6a32' (2023-09-28)
• Updated input 'emacs-overlay':
    'github:nix-community/emacs-overlay/965152624606d9cde16037e070070fa19955292c' (2023-09-22)
  → 'github:nix-community/emacs-overlay/ef992bca01ef97e8bbd1136693d24665390f39ce' (2023-09-28)
• Updated input 'emacs-overlay/nixpkgs-stable':
    'github:NixOS/nixpkgs/5d017a8822e0907fb96f7700a319f9fe2434de02' (2023-09-17)
  → 'github:NixOS/nixpkgs/5cfafa12d57374f48bcc36fda3274ada276cf69e' (2023-09-27)
• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/6600f42671f9359ae26bbddf9130e4abfd6cd6c7?dir=pkgs/firefox-addons' (2023-09-22)
  → 'gitlab:rycee/nur-expressions/0a64c59216be179aeaf9ed49d6135b7359a7326b?dir=pkgs/firefox-addons' (2023-09-28)
• Updated input 'helix-editor':
    'github:helix-editor/helix/2284bce970e9175fd81851e1616218a6119354fc' (2023-09-20)
  → 'github:helix-editor/helix/77fe8f214b15b8297a9f2f8ed929994559604d6c' (2023-09-28)
• Updated input 'home-manager':
    'github:nix-community/home-manager/408ba13188ff9ce309fa2bdd2f81287d79773b00' (2023-09-20)
  → 'github:nix-community/home-manager/9d4cdf8cc4da54beb5d2e927af7a259bb4a00645' (2023-09-28)
• Updated input 'home-manager/nixpkgs':
    'github:NixOS/nixpkgs/970a59bd19eff3752ce552935687100c46e820a5' (2023-09-17)
  → 'github:NixOS/nixpkgs/e35dcc04a3853da485a396bdd332217d0ac9054f' (2023-09-22)
• Updated input 'neovim-nightly-overlay':
    'github:nix-community/neovim-nightly-overlay/84ef24fe1c99ef55dc83000588f4b9f962f99afb' (2023-09-22)
  → 'github:nix-community/neovim-nightly-overlay/6fb6984f0bf3fcd4fd1c375bf879c15f2770f8aa' (2023-09-29)
• Updated input 'neovim-nightly-overlay/hercules-ci-effects':
    'github:hercules-ci/hercules-ci-effects/0a63bfa3f00a3775ea3a6722b247880f1ffe91ce' (2023-07-15)
  → 'github:hercules-ci/hercules-ci-effects/91fae5824f5f1199f61693c6590b4a89abaed9d7' (2023-09-25)
• Updated input 'neovim-nightly-overlay/neovim-flake':
    'github:neovim/neovim/fcfc87cb7727eb63265dc75476dc6ba56e0029c8?dir=contrib' (2023-09-21)
  → 'github:neovim/neovim/b917db062fc673dfbbc6a8c722b05101319ab44e?dir=contrib' (2023-09-28)
• Updated input 'nix-colors':
    'github:misterio77/nix-colors/b92df8f5eb1fa20d8e09810c03c9dc0d94ef2820' (2023-04-21)
  → 'github:misterio77/nix-colors/37227f274b34a3b51649166deb94ce7fec2c6a4c' (2023-09-22)
• Updated input 'nix-colors/base16-schemes':
    'github:tinted-theming/base16-schemes/dc048afa066287a719ddbab62b3e19e4b5110cf0' (2023-04-05)
  → 'github:tinted-theming/base16-schemes/d95123ca6377cd849cfdce92c0a24406b0c6a789' (2023-07-16)
• Updated input 'nix-colors/nixpkgs-lib':
    'github:nix-community/nixpkgs.lib/b18d328214ca3c627d3cc3f51fd9d1397fdbcd7a' (2023-04-02)
  → 'github:nix-community/nixpkgs.lib/819180647f428a3826bfc917a54449da1e532ce0' (2023-09-17)
• Updated input 'nixos-stable':
    'github:NixOS/nixpkgs/5d017a8822e0907fb96f7700a319f9fe2434de02' (2023-09-17)
  → 'github:NixOS/nixpkgs/5cfafa12d57374f48bcc36fda3274ada276cf69e' (2023-09-27)
• Updated input 'nixos-unstable':
    'github:NixOS/nixpkgs/5ba549eafcf3e33405e5f66decd1a72356632b96' (2023-09-19)
  → 'github:NixOS/nixpkgs/8a86b98f0ba1c405358f1b71ff8b5e1d317f5db2' (2023-09-27)
• Updated input 'nixos-unstable-small':
    'github:NixOS/nixpkgs/b1adee2f9396e4101e70fe31d04010d3489d9be5' (2023-09-20)
  → 'github:NixOS/nixpkgs/248a83fffc10b627da67fa6b25d2c13fc7542628' (2023-09-28)
• Updated input 'nixpkgs':
    'github:NixOS/nixpkgs/5ba549eafcf3e33405e5f66decd1a72356632b96' (2023-09-19)
  → 'github:NixOS/nixpkgs/8a86b98f0ba1c405358f1b71ff8b5e1d317f5db2' (2023-09-27)
• Updated input 'nur':
    'github:nix-community/NUR/c08d471ab79df5559ef363a0b29f94399ad17b18' (2023-09-22)
  → 'github:nix-community/NUR/50363ec39651feb3cb64821107ea9d8e8e186bc6' (2023-09-28)
2023-09-29 01:00:37 +00:00
56c0e245ca
hosts/plover: remove Portunus as LDAP server
It is also replaced with Kanidm (though read-only from its user store).
2023-09-28 18:48:17 +08:00
3d9351a99b
hosts/plover: delete Keycloak service entirely
It is now completely replaced with Kanidm.
2023-09-28 18:46:31 +08:00
64116b1e50
users/foo-dogsquared: update Tridactyl config 2023-09-28 18:34:34 +08:00