SebastianStork/nixos-config
1
0
Fork 0
mirror of https://github.com/SebastianStork/nixos-config.git synced 2026-01-21 23:11:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
1473 commits 2 branches 0 tags 3.4 MiB
Commit graph

1473 commits

This branch
This branch
All branches
Author SHA1 Message Date
SebastianStork
10bd5fcf24
gatus: Set alerting URL with new option ntfyUrl 2026-01-15 22:48:22 +01:00
SebastianStork
92d61afc40
gatus: Fix ntfy url 2026-01-15 22:39:28 +01:00
SebastianStork
9299842ce0
vps-monitor: Only allow writes to ntfy over vpn 2026-01-15 22:21:25 +01:00
SebastianStork
d73e3744a8
vps-public: Only allow access to radicale's login page over vpn 2026-01-15 22:20:48 +01:00
SebastianStork
2f246153d4
caddy: Add extraConfig option 2026-01-15 22:18:22 +01:00
SebastianStork
82844a3bb4
networking: Set overlay options in nebula module 2026-01-15 21:05:40 +01:00
SebastianStork
7b8435a555
Expose radicale publicly 2026-01-14 21:06:58 +01:00
SebastianStork
11769ee3ac
networking: Add dnsServers option 2026-01-14 19:53:33 +01:00
SebastianStork
ceeac97675
laptop: Disable vrr 2026-01-14 14:16:46 +01:00
SebastianStork
f147f38a4f
flake.lock: Update 
Flake lock file updates:

• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/45d1193599ec23b4ea0e18d8db76f777095a908e?dir=pkgs/firefox-addons&narHash=sha256-/SLSxYFoqDGguH0xaXiCdV5/eeBIeJBBvJxl4jnJgtA%3D' (2026-01-09)
  → 'gitlab:rycee/nur-expressions/2272c38028ad7830a7a7af031bef62976f82aca8?dir=pkgs/firefox-addons&narHash=sha256-JjKv/S%2BEn/Z9027mRT20lTUsjKZ9LLUSvpj5QodnDhY%3D' (2026-01-12)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/250481aafeb741edfe23d29195671c19b36b6dca?narHash=sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY%3D' (2026-01-05)
  → 'github:hercules-ci/flake-parts/80daad04eddbbf5a4d883996a73f3f542fa437ac?narHash=sha256-PVvu7OqHBGWN16zSi6tEmPwwHQ4rLPU9Plvs8/1TUBY%3D' (2026-01-11)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/d351d0653aeb7877273920cd3e823994e7579b0b?narHash=sha256-r4GVX%2BFToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE%3D' (2026-01-07)
  → 'github:nixos/nixpkgs/d03088749a110d52a4739348f39a63f84bb0be14?narHash=sha256-50aDK%2B8eLvsLK39TzQhKNq50/HcXyP4hyxOYoPoVxjo%3D' (2026-01-10)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/3497aa5c9457a9d88d71fa93a4a8368816fbeeba?narHash=sha256-dhhvQY67aboBk8b0/u0XB6vwHdgbROZT3fJAjyNh5Ww%3D' (2026-01-08)
  → 'github:nixos/nixpkgs/ffbc9f8cbaacfb331b6017d5a5abb21a492c9a38?narHash=sha256-1Sm77VfZh3mU0F5OqKABNLWxOuDeHIlcFjsXeeiPazs%3D' (2026-01-11)
• Updated input 'sops':
    'github:Mic92/sops-nix/ea3adcb6d2a000d9a69d0e23cad1f2cacb3a9fbe?narHash=sha256-WSBENPotD2MIhZwolL6GC9npqgaS5fkM7j07V2i/Ur8%3D' (2026-01-07)
  → 'github:Mic92/sops-nix/94f9cbd20f680ebb2ad6cdf39da97cbcfaedf004?narHash=sha256-HdnXWQsA1EI27IJlaENUEEug58trUrh6%2BMT0cFiDHmY%3D' (2026-01-11)
• Updated input 'treefmt':
    'github:numtide/treefmt-nix/778a1d691f1ef45dd68c661715c5bf8cbf131c80?narHash=sha256-QfX6g3Wj2vQe7oBJEbTf0npvC6sJoDbF9hb2%2BgM5tf8%3D' (2026-01-07)
  → 'github:numtide/treefmt-nix/e96d59dff5c0d7fddb9d113ba108f03c3ef99eca?narHash=sha256-67vyT1%2BxClLldnumAzCTBvU0jLZ1YBcf4vANRWP3%2BAk%3D' (2026-01-11)
• Updated input 'vscode-extensions':
    'github:nix-community/nix-vscode-extensions/905f111884f76ab6c1f6cdf1387d663696ccc369?narHash=sha256-eGWrFsXOkJMahFhxtPSFQf1VSjafE0ka2T/dTwk%2Bbyk%3D' (2026-01-06)
  → 'github:nix-community/nix-vscode-extensions/585d0a79468dfd5a1234b4c867fadc7cf24b6483?narHash=sha256-dS%2BXr1UQYBn8IUWs2/pme7xwl/CGGtmwCnyyfhOQgtM%3D' (2026-01-12)
 2026-01-12 22:41:53 +01:00
SebastianStork
b008c3a974
caddy: Persist state of acme 2026-01-12 22:29:56 +01:00
SebastianStork
f3ad654ad3
vps-public: Remove unneeded crowdsec secret 2026-01-12 20:59:32 +01:00
SebastianStork
2ae08dc9c5
grafana: Enable datasources and dashboards intelligently 2026-01-12 20:57:16 +01:00
SebastianStork
81a08c60a0
vps-monitor: Disable grafana's crowdsec dashboard 2026-01-12 20:38:15 +01:00
SebastianStork
55c0eb01be
Expose ntfy publicly 2026-01-12 01:42:30 +01:00
SebastianStork
b1a827580d
vps-public: Disable crowdsec 2026-01-12 00:57:33 +01:00
SebastianStork
2703325b4d
nebula: Change network interface name to nebula 2026-01-11 21:38:56 +01:00
SebastianStork
79da1f6644
vps-*: Fix nebula option name 2026-01-11 21:33:00 +01:00
SebastianStork
2b5bc47384
laptop: Fix dns by enabling networkd 2026-01-11 19:14:40 +01:00
SebastianStork
f7b10b0442
filrebrowser: Remove unused module arguments 2026-01-11 19:14:15 +01:00
SebastianStork
252abe9443
Create networking abstraction on top of nebula 2026-01-11 19:13:30 +01:00
SebastianStork
6804112df6
Disable any ipv6 functionality 2026-01-11 14:34:53 +01:00
SebastianStork
e0b6239ab6
nebula/sshd: Hardcode port 22 2026-01-11 14:14:01 +01:00
SebastianStork
3cf75dc7e1
Remove all traces of tailscale 2026-01-11 00:17:51 +01:00
SebastianStork
ccac4395a2
Finally disable tailscale on clients 2026-01-11 00:10:08 +01:00
SebastianStork
2acd61d67e
vps-monitor: Switch completely to nebula 2026-01-11 00:07:24 +01:00
SebastianStork
6069bd4b06
vps-public: Switch completely to nebula 2026-01-10 23:27:36 +01:00
SebastianStork
b7a2598ebe
vps-private: Switch completely to nebula 2026-01-10 23:25:13 +01:00
SebastianStork
116b4437fe
caddy: Add support for web services over nebula 2026-01-10 23:19:49 +01:00
SebastianStork
b7db8d2fd8
persistence: Copy directories option type from upstream 2026-01-10 17:50:01 +01:00
SebastianStork
809bf48e9d
deploy-rs: Deploy over nebula 2026-01-10 17:47:57 +01:00
SebastianStork
c6b56d87ff
gc: Enable on servers with gcroot cleanup only 2026-01-10 14:37:44 +01:00
SebastianStork
b41d8bee99
flake.lock: Update 
Flake lock file updates:

• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/461ec70d76363e9f76588afe59e02fbbc69da80e?dir=pkgs/firefox-addons&narHash=sha256-CGQgo92QKzCnRUF2wjEPsaIoKajVU5EyK1aDaMwo1xg%3D' (2026-01-06)
  → 'gitlab:rycee/nur-expressions/45d1193599ec23b4ea0e18d8db76f777095a908e?dir=pkgs/firefox-addons&narHash=sha256-/SLSxYFoqDGguH0xaXiCdV5/eeBIeJBBvJxl4jnJgtA%3D' (2026-01-09)
• Updated input 'home-manager':
    'github:nix-community/home-manager/6bd04da47cfb48dfd15eabf08364b78ad894f5b2?narHash=sha256-KpoCBPvwHz3gAQtIUkohE2InRBFK3r0/FM6z5SPWfvM%3D' (2026-01-05)
  → 'github:nix-community/home-manager/82fb7dedaad83e5e279127a38ef410bcfac6d77c?narHash=sha256-MOU5YdVu4DVwuT5ztXgQpPuRRBjSjUGIdUzOQr9iQOY%3D' (2026-01-08)
• Updated input 'impermanence':
    'github:nix-community/impermanence/4b3e914cdf97a5b536a889e939fb2fd2b043a170?narHash=sha256-LJggUHbpyeDvNagTUrdhe/pRVp4pnS6wVKALS782gRI%3D' (2025-01-25)
  → 'github:nix-community/impermanence/82e5bc4508cab9e8d5a136626276eb5bbce5e9c5?narHash=sha256-iyrn9AcPZCoyxX4OT8eMkBsjG7SRUQXXS/V1JzxS7rA%3D' (2026-01-07)
• Added input 'impermanence/home-manager':
    'github:nix-community/home-manager/7419250703fd5eb50e99bdfb07a86671939103ea?narHash=sha256-pQQnbxWpY3IiZqgelXHIe/OAE/Yv4NSQq7fch7M6nXQ%3D' (2025-05-23)
• Added input 'impermanence/home-manager/nixpkgs':
    follows 'impermanence/nixpkgs'
• Added input 'impermanence/nixpkgs':
    'github:nixos/nixpkgs/063f43f2dbdef86376cc29ad646c45c46e93234c?narHash=sha256-6m1Y3/4pVw1RWTsrkAK2VMYSzG4MMIj7sqUy7o8th1o%3D' (2025-05-23)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/30a3c519afcf3f99e2c6df3b359aec5692054d92?narHash=sha256-8IQQUorUGiSmFaPnLSo2%2BT%2BrjHtiNWc%2BOAzeHck7N48%3D' (2026-01-03)
  → 'github:nixos/nixpkgs/d351d0653aeb7877273920cd3e823994e7579b0b?narHash=sha256-r4GVX%2BFToWVE2My8VVZH4V0pTIpnu2ZE8/Z4uxGEMBE%3D' (2026-01-07)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/fb7944c166a3b630f177938e478f0378e64ce108?narHash=sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf%2BOkucw%3D' (2026-01-02)
  → 'github:nixos/nixpkgs/3497aa5c9457a9d88d71fa93a4a8368816fbeeba?narHash=sha256-dhhvQY67aboBk8b0/u0XB6vwHdgbROZT3fJAjyNh5Ww%3D' (2026-01-08)
• Updated input 'sops':
    'github:Mic92/sops-nix/ecc41505948ec2ab0325f14c9862a4329c2b4190?narHash=sha256-0zUU/PW09d6oBaR8x8vMHcAhg1MOvo3CwoXgHijzzNE%3D' (2026-01-04)
  → 'github:Mic92/sops-nix/ea3adcb6d2a000d9a69d0e23cad1f2cacb3a9fbe?narHash=sha256-WSBENPotD2MIhZwolL6GC9npqgaS5fkM7j07V2i/Ur8%3D' (2026-01-07)
• Updated input 'treefmt':
    'github:numtide/treefmt-nix/d56486eb9493ad9c4777c65932618e9c2d0468fc?narHash=sha256-MpffQxHxmjVKMiQd0Tg2IM/bSjjdQAM%2BNDcX6yxj7rE%3D' (2026-01-03)
  → 'github:numtide/treefmt-nix/778a1d691f1ef45dd68c661715c5bf8cbf131c80?narHash=sha256-QfX6g3Wj2vQe7oBJEbTf0npvC6sJoDbF9hb2%2BgM5tf8%3D' (2026-01-07)
 2026-01-10 01:39:16 +01:00
SebastianStork
653ebd2c85
syncthing: Connect devices over nebula instead of tailscale 2026-01-10 01:32:23 +01:00
SebastianStork
bd196f1f27
nebula/dns: Add forward-zone for tailscale domains 
I'm not sure if this is actually doing anything
 2026-01-10 01:31:09 +01:00
SebastianStork
df8682f4d0
tailscale: Fix interface by making it unmanaged again 2026-01-10 01:26:16 +01:00
SebastianStork
ac3b43a952
nebula: Add DNS support by configuring unbound 2026-01-09 19:43:19 +01:00
SebastianStork
dc3fc4d5ad
Enable localsend on clients 2026-01-09 16:15:31 +01:00
SebastianStork
1c61682e5a
tailscale: Disable ssh for all hosts 2026-01-07 20:51:50 +01:00
SebastianStork
72ed799826
nebula/sshd: Only allow key auth 2026-01-07 20:40:09 +01:00
SebastianStork
2f4a83a906
sops: Align home module with system module 2026-01-07 18:46:59 +01:00
SebastianStork
2db3be17a6
git: Fix ssh evaluation warning 2026-01-06 22:55:32 +01:00
SebastianStork
9a101eeeac
nebula: Reset logging level to info 2026-01-06 21:36:43 +01:00
SebastianStork
ef6cdd8e22
nebula: Roll out to all hosts 2026-01-06 21:33:46 +01:00
SebastianStork
b11001f5bb
flake.lock: Update 
Flake lock file updates:

• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/bc31b4b6220009dc5fda6082496b9d97b1e855ee?dir=pkgs/firefox-addons&narHash=sha256-XKeo9F/AB%2BAyzgR2xaoxyLpI2sRJiu60f9etGJymyMk%3D' (2026-01-02)
  → 'gitlab:rycee/nur-expressions/461ec70d76363e9f76588afe59e02fbbc69da80e?dir=pkgs/firefox-addons&narHash=sha256-CGQgo92QKzCnRUF2wjEPsaIoKajVU5EyK1aDaMwo1xg%3D' (2026-01-06)
• Updated input 'flake-parts':
    'github:hercules-ci/flake-parts/a34fae9c08a15ad73f295041fec82323541400a9?narHash=sha256-XswHlK/Qtjasvhd1nOa1e8MgZ8GS//jBoTqWtrS1Giw%3D' (2025-12-15)
  → 'github:hercules-ci/flake-parts/250481aafeb741edfe23d29195671c19b36b6dca?narHash=sha256-feveD98mQpptwrAEggBQKJTYbvwwglSbOv53uCfH9PY%3D' (2026-01-05)
• Updated input 'home-manager':
    'github:nix-community/home-manager/d49d2543f02dbd789ed032188c84570d929223cb?narHash=sha256-YmaYMduV5ko8zURUT1VLGDbVC1L/bxHS0NsiPoZ6bBM%3D' (2026-01-01)
  → 'github:nix-community/home-manager/6bd04da47cfb48dfd15eabf08364b78ad894f5b2?narHash=sha256-KpoCBPvwHz3gAQtIUkohE2InRBFK3r0/FM6z5SPWfvM%3D' (2026-01-05)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/89dbf01df72eb5ebe3b24a86334b12c27d68016a?narHash=sha256-tzYsEzXEVa7op1LTnrLSiPGrcCY6948iD0EcNLWcmzo%3D' (2025-12-29)
  → 'github:nixos/nixpkgs/30a3c519afcf3f99e2c6df3b359aec5692054d92?narHash=sha256-8IQQUorUGiSmFaPnLSo2%2BT%2BrjHtiNWc%2BOAzeHck7N48%3D' (2026-01-03)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/cad22e7d996aea55ecab064e84834289143e44a0?narHash=sha256-5vKw92l1GyTnjoLzEagJy5V5mDFck72LiQWZSOnSicw%3D' (2025-12-30)
  → 'github:nixos/nixpkgs/fb7944c166a3b630f177938e478f0378e64ce108?narHash=sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf%2BOkucw%3D' (2026-01-02)
• Updated input 'sops':
    'github:Mic92/sops-nix/61b39c7b657081c2adc91b75dd3ad8a91d6f07a7?narHash=sha256-pn8AxxfajqyR/Dmr1wnZYdUXHgM3u6z9x0Z1Ijmz2UQ%3D' (2025-12-28)
  → 'github:Mic92/sops-nix/ecc41505948ec2ab0325f14c9862a4329c2b4190?narHash=sha256-0zUU/PW09d6oBaR8x8vMHcAhg1MOvo3CwoXgHijzzNE%3D' (2026-01-04)
• Updated input 'treefmt':
    'github:numtide/treefmt-nix/dec15f37015ac2e774c84d0952d57fcdf169b54d?narHash=sha256-yOt/FTB7oSEKQH9EZMFMeuldK1HGpQs2eAzdS9hNS/o%3D' (2025-12-30)
  → 'github:numtide/treefmt-nix/d56486eb9493ad9c4777c65932618e9c2d0468fc?narHash=sha256-MpffQxHxmjVKMiQd0Tg2IM/bSjjdQAM%2BNDcX6yxj7rE%3D' (2026-01-03)
• Updated input 'vscode-extensions':
    'github:nix-community/nix-vscode-extensions/2a8c99844e9e65f6deeee8f1d7e8194998795b41?narHash=sha256-YXKjuWf/f6Smvv8qEmSSNpXIV%2BEXllglMZaMVuChT2Q%3D' (2026-01-02)
  → 'github:nix-community/nix-vscode-extensions/905f111884f76ab6c1f6cdf1387d663696ccc369?narHash=sha256-eGWrFsXOkJMahFhxtPSFQf1VSjafE0ka2T/dTwk%2Bbyk%3D' (2026-01-06)
 2026-01-06 16:41:34 +01:00
SebastianStork
2978d2c1a5
nebula: Fix tailscale ssh disconnects 2026-01-03 00:42:02 +01:00
SebastianStork
61f5c54196
nebula: Enable firewall and restrict ssh access by role 2026-01-03 00:41:13 +01:00
SebastianStork
382dae6cbb
flake.lock: Update 
Flake lock file updates:

• Updated input 'firefox-addons':
    'gitlab:rycee/nur-expressions/e55ad9427895bc94e55b2cb6474ca46773816885?dir=pkgs/firefox-addons&narHash=sha256-D7XoHk5/daZt3E0K6uCueVxpDYp%2BcIoCctoTsz5mjfk%3D' (2025-12-27)
  → 'gitlab:rycee/nur-expressions/bc31b4b6220009dc5fda6082496b9d97b1e855ee?dir=pkgs/firefox-addons&narHash=sha256-XKeo9F/AB%2BAyzgR2xaoxyLpI2sRJiu60f9etGJymyMk%3D' (2026-01-02)
• Updated input 'home-manager':
    'github:nix-community/home-manager/e298a148013c980e3c8c0ac075295fab5074d643?narHash=sha256-VvZeAKyB3vhyHStSO8ACKzWRKNQPmVWktjfuSVdvtUA%3D' (2025-12-28)
  → 'github:nix-community/home-manager/d49d2543f02dbd789ed032188c84570d929223cb?narHash=sha256-YmaYMduV5ko8zURUT1VLGDbVC1L/bxHS0NsiPoZ6bBM%3D' (2026-01-01)
• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/c5db9569ac9cc70929c268ac461f4003e3e5ca80?narHash=sha256-UXVtN77D7pzKmzOotFTStgZBqpOcf8cO95FcupWp4Zo%3D' (2025-12-24)
  → 'github:NixOS/nixos-hardware/40b1a28dce561bea34858287fbb23052c3ee63fe?narHash=sha256-ljDBUDpD1Cg5n3mJI81Hz5qeZAwCGxon4kQW3Ho3%2B6Q%3D' (2025-12-31)
• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/f560ccec6b1116b22e6ed15f4c510997d99d5852?narHash=sha256-BASnpCLodmgiVn0M1MU2Pqyoz0aHwar/0qLkp7CjvSQ%3D' (2025-12-26)
  → 'github:nixos/nixpkgs/89dbf01df72eb5ebe3b24a86334b12c27d68016a?narHash=sha256-tzYsEzXEVa7op1LTnrLSiPGrcCY6948iD0EcNLWcmzo%3D' (2025-12-29)
• Updated input 'nixpkgs-unstable':
    'github:nixos/nixpkgs/3e2499d5539c16d0d173ba53552a4ff8547f4539?narHash=sha256-QEhk0eXgyIqTpJ/ehZKg9IKS7EtlWxF3N7DXy42zPfU%3D' (2025-12-25)
  → 'github:nixos/nixpkgs/cad22e7d996aea55ecab064e84834289143e44a0?narHash=sha256-5vKw92l1GyTnjoLzEagJy5V5mDFck72LiQWZSOnSicw%3D' (2025-12-30)
• Updated input 'treefmt':
    'github:numtide/treefmt-nix/42d96e75aa56a3f70cab7e7dc4a32868db28e8fd?narHash=sha256-%2BcqN4PJz9y0JQXfAK5J1drd0U05D5fcAGhzhfVrDlsI%3D' (2025-12-17)
  → 'github:numtide/treefmt-nix/dec15f37015ac2e774c84d0952d57fcdf169b54d?narHash=sha256-yOt/FTB7oSEKQH9EZMFMeuldK1HGpQs2eAzdS9hNS/o%3D' (2025-12-30)
• Updated input 'vscode-extensions':
    'github:nix-community/nix-vscode-extensions/2b8957cca4532b30e06c1cbd0386ec4fbf3b16fa?narHash=sha256-BA%2BgbbAFYY%2Bz0WvIWu8nwOZYzHuzHbnnIH%2BR6vjSanI%3D' (2025-12-28)
  → 'github:nix-community/nix-vscode-extensions/2a8c99844e9e65f6deeee8f1d7e8194998795b41?narHash=sha256-YXKjuWf/f6Smvv8qEmSSNpXIV%2BEXllglMZaMVuChT2Q%3D' (2026-01-02)
 2026-01-02 13:12:49 +01:00
SebastianStork
b4191c56aa
nebula: Configure ssh server 2026-01-01 23:46:15 +01:00
SebastianStork
94ac7bbca3
vps-public: Disable forgejo's ssh server 2025-12-31 19:19:04 +01:00