Commit Graph

210 Commits

Author SHA1 Message Date
c89c29ac10
hosts/plover: update hardware configuration 2023-07-02 20:21:29 +08:00
f27b7e045c
hosts/plover: modularize Borg backup paths 2023-07-02 12:23:50 +08:00
dd1b2b0638
hosts/plover: fix Gitea dump cleanup 2023-07-01 16:29:29 +08:00
35ef89a312
hosts/plover: update Borg SSH key 2023-06-30 22:31:14 +08:00
cb54c33afc
hosts/plover: add disko device config 2023-06-30 13:38:38 +08:00
33b8dfe9c6
hosts/plover: enable DNS-over-TLS for Bind 2023-06-30 10:48:10 +08:00
ffad85fa70
hosts/plover: enable nginx-bad-request jail 2023-06-30 10:47:02 +08:00
831022bf22
hosts/plover: enable DH params generation
This is for certain applications as we'll see.
2023-06-30 10:46:43 +08:00
53f7cf6e83
chore: reformat codebase 2023-06-29 14:17:38 +08:00
9c3d3901ab
hosts/plover: update Bind secrets permission 2023-06-29 09:46:35 +08:00
a8aef35c5c
hosts/plover: update Bind server config 2023-06-29 09:44:55 +08:00
c9440205cf
hosts/plover: update Vaultwarden admin token 2023-06-28 19:37:10 +08:00
94c94be9a4
hosts/plover: harden Vaultwarden service 2023-06-28 14:01:18 +08:00
8043b8d16c
hosts/plover: update Bind hardening settings 2023-06-28 14:01:02 +08:00
38321152f0
hosts/plover: remove CoreDNS module
Bind works well enough for now so no need for this service.
2023-06-28 09:12:56 +08:00
88c0c9aa75
hosts/plover: update service files to backup 2023-06-27 22:49:49 +08:00
8a84eb2445
hosts/plover: move Wireguard secrets to appropriate location 2023-06-27 20:52:57 +08:00
e76a881aee
hosts/plover: update Wireguard routing 2023-06-27 12:54:29 +08:00
4dcb82c72b
hosts/plover: update PostgreSQL cert config 2023-06-27 12:53:50 +08:00
1e2d251e1d
hosts/plover: harden Bind systemd service 2023-06-28 00:19:06 +08:00
d98527c89b
hosts/plover: update Bind config for dynamic updates 2023-06-27 22:56:18 +08:00
36e2a817ae
hosts/plover: fix Wireguard firewall settings 2023-06-22 23:17:28 +08:00
482e90efaa
hosts/plover: update zone file to include self-hosted DNS server 2023-06-22 22:52:17 +08:00
2688064651
hosts/plover: add TLS support for PostgreSQL 2023-06-22 18:05:54 +08:00
ff3dd9d3f7
hosts/plover: update nameserver list
With the right configuration alongside systemd-resolved, it shouldn't be
much of a problem.
2023-06-22 18:03:21 +08:00
9cfe72a62c
docs: update Plover config notes 2023-06-22 18:02:23 +08:00
4b2777cda2
hosts/plover: change network attribute name
It is somewhat not great naming at first.
2023-06-22 18:01:19 +08:00
eb1003f7e6
hosts/plover: change DNS server to Bind9
CoreDNS doesn't have dynamic updates available yet (though there are PRs
and discussions for it) so we'll have to go with something that has it.
Also, it provides an opportunity for me to use the de-facto software for
this.
2023-06-22 17:56:47 +08:00
4022f9b43c
hosts/plover: open custom Atuin sync server 2023-06-22 11:12:58 +08:00
03ca6722e9
chore: reformat codebase 2023-06-22 11:12:43 +08:00
55eb4d8c0c
hosts/plover: initialize Terraform configuration 2023-06-22 11:06:43 +08:00
a0219f6260
hosts/plover: move GRUB config to Hetzner hardware config 2023-06-20 19:57:06 +08:00
5a8cdc5769
hosts/plover: disable DNSSEC
It's giving me trouble for now. Ideally, this should be configured with
the individual interfaces that is giving me the troubles.
2023-06-20 09:56:40 +08:00
753699869e
hosts/plover: update nameserver list 2023-06-13 13:33:36 +08:00
9ba11f0fa6
hosts/plover: update network interface settings 2023-06-13 13:32:41 +08:00
805ef47f70
hosts/plover: update Wireguard firewall rules 2023-06-13 13:20:00 +08:00
9f91d78294
hosts/plover: update DNS server with loopback device 2023-06-12 15:32:38 +08:00
5949475aee
hosts/plover: update Wireguard "server" configuration 2023-06-11 14:11:35 +08:00
bfb4837627
hosts/plover: update DNS server settings 2023-06-11 12:26:59 +08:00
271750f755
hosts/plover: improve network metadata 2023-06-11 12:26:02 +08:00
1bdda28ffe
chore: reformat codebase 2023-06-08 21:19:17 +08:00
ab8ab4921c
config: add more comments 2023-06-08 19:53:20 +08:00
29d990f33c
hosts/plover: improve firewall settings for Wireguard service 2023-06-08 19:52:29 +08:00
316602a35d
hosts/plover: update DNS server list for LAN interface 2023-06-08 19:51:38 +08:00
c066f85fc2
hosts/plover: update to NixOS 23.05 2023-05-15 22:13:51 +08:00
b9e05dd1fa
hosts/plover: update Gitea configuration 2023-05-02 12:34:24 +08:00
43b4ddd734
hosts/plover: update Borg SSH key 2023-05-02 08:06:43 +08:00
fee1c9653e
hosts/plover: update DNS zone file 2023-03-03 17:18:23 +08:00
993f856c39
docs: update networking guide for Plover server 2023-02-25 10:18:02 +08:00
19db60aad2
hosts/ni: update zram setup 2023-02-25 10:02:43 +08:00