272 commits

Author	SHA1	Message	Date
SebastianStork	8ba17ac1ce	Replace lib' with self.lib	2026-01-16 14:09:34 +01:00
SebastianStork	07c46beefb	nebula: Fix constant restarts by using fixed paths	2026-01-16 10:53:41 +01:00
SebastianStork	2f246153d4	caddy: Add extraConfig option	2026-01-15 22:18:22 +01:00
SebastianStork	82844a3bb4	networking: Set overlay options in nebula module	2026-01-15 21:05:40 +01:00
SebastianStork	11769ee3ac	networking: Add dnsServers option	2026-01-14 19:53:33 +01:00
SebastianStork	b008c3a974	caddy: Persist state of acme	2026-01-12 22:29:56 +01:00
SebastianStork	2703325b4d	nebula: Change network interface name to nebula	2026-01-11 21:38:56 +01:00
SebastianStork	252abe9443	Create networking abstraction on top of nebula	2026-01-11 19:13:30 +01:00
SebastianStork	e0b6239ab6	nebula/sshd: Hardcode port 22	2026-01-11 14:14:01 +01:00
SebastianStork	3cf75dc7e1	Remove all traces of tailscale	2026-01-11 00:17:51 +01:00
SebastianStork	b7a2598ebe	vps-private: Switch completely to nebula	2026-01-10 23:25:13 +01:00
SebastianStork	116b4437fe	caddy: Add support for web services over nebula	2026-01-10 23:19:49 +01:00
SebastianStork	c6b56d87ff	gc: Enable on servers with gcroot cleanup only	2026-01-10 14:37:44 +01:00
SebastianStork	653ebd2c85	syncthing: Connect devices over nebula instead of tailscale	2026-01-10 01:32:23 +01:00
SebastianStork	bd196f1f27	nebula/dns: Add forward-zone for tailscale domains ... I'm not sure if this is actually doing anything	2026-01-10 01:31:09 +01:00
SebastianStork	df8682f4d0	tailscale: Fix interface by making it unmanaged again	2026-01-10 01:26:16 +01:00
SebastianStork	ac3b43a952	nebula: Add DNS support by configuring unbound	2026-01-09 19:43:19 +01:00
SebastianStork	72ed799826	nebula/sshd: Only allow key auth	2026-01-07 20:40:09 +01:00
SebastianStork	9a101eeeac	nebula: Reset logging level to info	2026-01-06 21:36:43 +01:00
SebastianStork	2978d2c1a5	nebula: Fix tailscale ssh disconnects	2026-01-03 00:42:02 +01:00
SebastianStork	61f5c54196	nebula: Enable firewall and restrict ssh access by role	2026-01-03 00:41:13 +01:00
SebastianStork	b4191c56aa	nebula: Configure ssh server	2026-01-01 23:46:15 +01:00
SebastianStork	21b4e04613	nebula: Rename options for public key and certificate paths for clarity	2025-12-25 20:27:13 +01:00
SebastianStork	de16ca49e8	nebula: Assert routability of lighthouses	2025-12-25 20:00:44 +01:00
SebastianStork	d58da5ce7d	nebula: Set logging level to warning	2025-12-25 19:40:29 +01:00
SebastianStork	61f4ac9053	nebula: Allow non-lighthouse nodes to be static hosts	2025-12-25 19:39:44 +01:00
SebastianStork	a7a16378b2	nebula: Init module	2025-12-23 14:42:26 +01:00
SebastianStork	2eea28da43	caddy: Fix caddy-tailscale hash	2025-12-22 22:38:04 +01:00
SebastianStork	e63e374731	syncthing: Refactor folder config	2025-12-10 15:11:36 +01:00
SebastianStork	35e0b2d6b4	caddy: Update tailscale plugin	2025-11-26 21:13:42 +01:00
SebastianStork	d9eae8fc2c	crowdsec: Disable the new implementation	2025-11-26 20:14:34 +01:00
SebastianStork	a4ff86def8	Replace deprecated pkgs.system with pkgs.stdenv.hostPlatform.system	2025-11-26 20:08:19 +01:00
SebastianStork	0c5d4436ad	restic: Fix typo in variable name	2025-11-25 13:20:26 +01:00
SebastianStork	1fe43f5802	persistence: Rename module ... `impermanence` -> `persistence`	2025-11-11 15:29:17 +01:00
SebastianStork	3fd0e85151	meta/ports: Rename list options	2025-11-11 13:23:58 +01:00
SebastianStork	250e2ea3d0	meta/domain: Rename list options	2025-11-11 13:12:32 +01:00
SebastianStork	59d2a732a0	crowdsec: Auto enable sources when appropriate	2025-11-09 21:41:30 +01:00
SebastianStork	c9f05a040e	caddy: Configure virtual hosts inside each web-service's module instead of in the host configs	2025-11-08 22:52:01 +01:00
SebastianStork	dfeb11dfbd	caddy: Add file-server capabilities	2025-11-08 22:11:45 +01:00
SebastianStork	8c138d274f	caddy: Remove unnecessary enable option	2025-11-08 21:34:42 +01:00
SebastianStork	39bd59c8ee	caddy: Fix hard coded metrics port	2025-11-07 11:35:32 +01:00
SebastianStork	93bae9b48c	caddy: Fix hash	2025-11-04 00:23:52 +01:00
SebastianStork	d3dbe02b01	caddy: Only install tailscale plugin when tailscale hosts exist	2025-11-03 23:35:10 +01:00
SebastianStork	145e76cec7	caddy: Simplify with HostsExist variables	2025-11-03 23:34:34 +01:00
SebastianStork	83572e8f51	syncthing: Rename variable	2025-11-03 17:51:19 +01:00
SebastianStork	6755036951	restic: Auto create healthcheck endpoints	2025-10-26 23:21:45 +01:00
SebastianStork	ba78828f4f	restic: Rename option resticBackups to restic.backups	2025-10-23 20:21:37 +02:00
SebastianStork	4a7e655f71	caddy: Remove wildcard support ... Supporting wildcards has proven more trouble than it's worth. While convenient when setting up new domains, it makes the module harder to maintain and makes adding features more difficult.	2025-10-22 22:37:20 +02:00
SebastianStork	d2de5157fb	wlan: Consider all types of networks	2025-10-22 12:58:04 +02:00
SebastianStork	6be0aa5064	wlan: Cleanup previous network files after iwd stops instead of before it starts	2025-10-22 12:56:31 +02:00